U.S. Department of Justice 



Federal Bureau of Investigation 

Washington, D.C. 20535 


January 5, 2018 

MR. JOHN GREENEWALD JR. 

SUITE 1203 

27305 WEST LIVE OAK ROAD 
CASTAIC, CA 91384 


FOIPA Request No.: 1392528-000 
Subject: Sullivan & Cromwell 

Dear Mr. Greenewald: 

Records responsive to your request were previously processed under the provisions of the 
Freedom of Information Act. Enclosed is one CD containing 117 pages of previously processed documents 
and a copy of the Explanation of Exemptions. This release is being provided to you at no charge. 

Please be advised that additional records potentially responsive to your subject may exist. If this 
release of previously processed material does not satisfy your information needs for this request, you may 
request an additional search for records. Submit your request by mail or fax to - Work Process Unit, 170 
Marcel Drive, Winchester, VA 22602, fax number (540) 868-4997. Please cite the FOIPA Request Number 
in your correspondence. 

For your information, Congress excluded three discrete categories of law enforcement and national 
security records from the requirements of the Freedom of Information Act (FOIA). See 5 U.S. C. § 552(c) 
(2006 & Supp. IV (2010). This response is limited to those records subject to the requirements of the FOIA. 
This is a standard notification that is given to all our requesters and should not be taken as an indication that 
excluded records do, or do not, exist. 

For questions regarding our determinations, visit the www.fbi.gov/foia website under “Contact Us.” 
The FOIPA Request Number listed above has been assigned to your request. Please use this number in all 
correspondence concerning your request. 

You may file an appeal by writing to the Director, Office of Information Policy (OIP), United States 
Department of Justice, Suite 11050, 1425 New York Avenue, NW, Washington, D.C. 20530-0001, or you 
may submit an appeal through OIP's FOIAonline portal by creating an account on the following web 
site: https://foiaonline.requlations.qov/foia/action/public/home . Your appeal must be postmarked or 
electronically transmitted within ninety (90) days from the date of this letter in order to be considered timely. 
If you submit your appeal by mail, both the letter and the envelope should be clearly marked “Freedom of 
Information Act Appeal.” Please cite the FOIPA Request Number assigned to your request so it may be 
easily identified. 

You may seek dispute resolution services by contacting the Office of Government Information 
Services (OGIS) at 877-684-6448, or by emailing oqis(S)nara.qov . Alternatively, you may contact the FBI’s 
FOIA Public Liaison by emailing foipaquestions@fbi.gov . If you submit your dispute resolution 
correspondence by email, the subject heading should clearly state “Dispute Resolution Services.” Please 
also cite the FOIPA Request Number assigned to your request so it may be easily identified. 

Sincerely, 

David M. Hardy 
Section Chief, 

Record/Information 
Dissemination Section 
Records Management Division 
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EXPLANATION OF EXEMPTIONS 


SUBSECTIONS OF TITLE 5, UNITED STATES CODE, SECTION 552 

(b)(1) (A) specifically authorized under criteria established by an Executive order to be kept secret in the interest of national defense or foreign 

policy and (B) are in fact properly classified to such Executive order; 

(b)(2) related solely to the internal personnel rules and practices of an agency; 

(b)(3) specifically exempted from disclosure by statute (other than section 552b of this title), provided that such statute (A) requires that the 

matters be withheld from the public in such a manner as to leave no discretion on issue, or (B) establishes particular criteria for withholding 
or refers to particular types of matters to be withheld; 

(b)(4) trade secrets and commercial or financial information obtained from a person and privileged or confidential; 

(b)(5) inter-agency or intra-agency memorandums or letters which would not be available by law to a party other than an agency in litigation with 

the agency; 

(b)(6) personnel and medical files and similar files the disclosure of which would constitute a clearly unwarranted invasion of personal privacy; 

(b)(7) records or information compiled for law enforcement purposes, but only to the extent that the production of such law enforcement records 

or information ( A ) could reasonably be expected to interfere with enforcement proceedings, ( B ) would deprive a person of a right to a 
fair trial or an impartial adjudication, ( C ) could reasonably be expected to constitute an unwarranted invasion of personal privacy, ( D ) 
could reasonably be expected to disclose the identity of confidential source, including a State, local, or foreign agency or authority or any 
private institution which furnished information on a confidential basis, and, in the case of record or information compiled by a criminal law 
enforcement authority in the course of a criminal investigation, or by an agency conducting a lawful national security intelligence 
investigation, information furnished by a confidential source, ( E ) would disclose techniques and procedures for law enforcement 
investigations or prosecutions, or would disclose guidelines for law enforcement investigations or prosecutions if such disclosure could 
reasonably be expected to risk circumvention of the law, or ( F ) could reasonably be expected to endanger the life or physical safety of any 
individual; 

(b)(8) contained in or related to examination, operating, or condition reports prepared by, on behalf of, or for the use of an agency responsible for 
the regulation or supervision of financial institutions; or 

(b)(9) geological and geophysical information and data, including maps, concerning wells. 

SUBSECTIONS OF TITLE 5, UNITED STATES CODE, SECTION 552a 

(d)(5) information compiled in reasonable anticipation of a civil action proceeding; 

(j) (2) material reporting investigative efforts pertaining to the enforcement of criminal law including efforts to prevent, control, or reduce crime 

or apprehend criminals; 

(k) (l) information which is currently and properly classified pursuant to an Executive order in the interest of the national defense or foreign 

policy, for example, information involving intelligence sources or methods; 

(k)(2) investigatory material compiled for law enforcement purposes, other than criminal, which did not result in loss of a right, benefit or 

privilege under Federal programs, or which would identify a source who furnished information pursuant to a promise that his/her identity 
would be held in confidence; 

(k)(3) material maintained in connection with providing protective services to the President of the United States or any other individual pursuant 
to the authority of Title 18, United States Code, Section 3056; 

(k)(4) required by statute to be maintained and used solely as statistical records; 

(k)(5) investigatory material compiled solely for the purpose of determining suitability, eligibility, or qualifications for Federal civilian 
employment or for access to classified information, the disclosure of which would reveal the identity of the person who furnished 
information pursuant to a promise that his/her identity would be held in confidence; 

(k)(6) testing or examination material used to determine individual qualifications for appointment or promotion in Federal Government service 
he release of which would compromise the testing or examination process; 

(k)(7) material used to determine potential for promotion in the armed services, the disclosure of which would reveal the identity of the person 
who furnished the material pursuant to a promise that his/her identity would be held in confidence. 
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FEDERAL BUREAU OF INVESTIGATION 


Precedence: ROUTINE 


Date: 08/15/2008 


To: New York 

Cyber 


Attn: 


SSA 

CIU-T 


From: New York 



Drafted By: I I :apb 


Case ID #: 2 88A-NY-NEW (Pendipg) 

Title: UNSUB (s) 

Sullivan & Cromwell LLP; 

Wachtell, LiptXi, Rosen & Katz; 

Greenberg Trdurig, LLC - Victims 
CIP / 

00:NY X 

Synopsis: To open case in captioned matter and to advise Cyber 

of a new 288A investigation. 

Details: On 8/14/2008, writer received information from the 
Southern District of New York (SDNY) that the website for a major 
New York City lawfirm, Sullivan & Cromwell, LLP, was spoofed in a 
suspected E-Mail phish. The spoofed website was registered and 
hosted at GoDaddy.com. The Sullivan & Cromwell (S&C) Wikipedia 
page was altered so the link to the legitimate S&C website 
redirected to the spoofed address. Two other major New York City 
lawfirms, Wachtell, Lipton, Rosen & Katz and Greenberg Traurig, 
LLC, have also been victims. All three lawfirms have major 
mergers and acquisitions practices involving deals worth large 
sums of money. S&C believes that someone was trying to intercept 
the misdirected E-Mails, about the mergers and acquisitions, in 
an attempt to get insider information on Wall Street activity. 

The activity occurred in late July, 2008 and the spoofed sites 
were removed, by GoDaddy.com, around 08/08/2008. 
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To: New York From: New York 

Re: 2 8 8A-NY-NEW, 08/15/2008 

LEAD(s) : 

Set Lead 1: (Info) 

CYBER 

AT WASHINGTON, D.C. 
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Grand Jury Material - Disseminate Only Pursuant to Rule 6 (e) 
Federal Rules of Criminal Procedure 
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Federal Taxpayer Information (FTI) 

□ Yes ^ No 
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Sullivan & Cromwell LLP; 

Wachtell, Lipton, Rosen &Katz; 

Greenberg Traurig, LLC - Victims 
CIP 

00:NY 


Reference: 


(Communication Enclosing Material) 


Description: ’□ Original notes re interview of 












STATE OF FLORIDA 

Department of Highway Safety & Motor Vehicles 

Driver And Vehicle Information Database (DAVID) 


DIGITAL IMAGES ARE RESTRICTED TO LAW ENFORCEMENT USE PURSUANT TO 
S. 322.142(4), FLORIDA STATUTES - IMAGES INCLUDE PHOTOGRAPHS AND SIGNATURES 

Individual Summary Page 


Emergency Contact Information 


Conditional Messages: 
SAFE DRIVER 


_DL/ID Number 


[ 


Class 

E 


Date of Birth 


Sex 

M 


Status 

VALID 


AIL Addresses On File 


Height 

510 


Country Of Birth 


Restrictions Endorsements 


Issue Date Duplicate Expiration Date 

06-02-05 Date 08-05-11 


SSN Form Number 

1 X060506024833 



b7C 


Vehicle Information ! 

Record 

VIN 

Type || Color || Body 

Make || Acquired Date 

Reg 

, View 


JH4CL96918C003125 

AUTO 

BLACK 

4 DOOR 

ACURA | 09-15-07 



= 

View 


5N1AR18U56C664093 

AUTO 

WHITE 

UTILITY 

NISSAN | 05-24-06 



| Driver License Transactions 

Record 

DL/ID Number 

Transaction Date 

Issue Date 

Update Time 

Lie Type 

Issue Type 

Change Type 

FLDisp 

} View 


08-12-08 

08-12-08 

08-14-08 10:53:32 

ID 

Original/CIPS 



i View 


06-02-05 

06-02-05 

06-07-05 16:56:36 

DL 

Renewal/CIPS 



View 


05-17-01 

04-30-99 

05-17-0115:31:34 

ID 

Duplicate 

None 


1 View 


05-17-01 

04-30-99 

05-17-01 15:31:01 

DL 

Replacement 

None 

Surrendered 

; View 


04-30-99 

04-30-99 

04-30-99 08:22:52 

ID 

Original 

None 


• View 


04-30-99 

04-30-99 

04-30-99 08:20:52 

DL 

Original 

None 



Historical Driver License^ Activity 


Vehicle Insurance' : 

Previous Vehicles 

Photo. Array •' 

Signature Array 
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STATE OF FLORIDA 

Department of Highway Safety & Motor Vehicles 

Driver And Vehicle Information Database (DAVID) 

DIGITAL IMAGES ARE RESTRICTED TO LAW ENFORCEMENT USE PURSUANT TO 
S. 322.142(4), FLORIDA STATUTES - IMAGES INCLUDE PHOTOGRAPHS AND SIGNATURES 

Driver License Transaction Page 


Driver License Transaction on 02-01-08 
DL/ID Number Class 


Date of B rth 

Sex 

Height 


M 

5'10 

Restrictions 

A 


Endorsements 

Fingerprint on file 
None 



Issue Date 


Issue Time 

02-01-08 


16:58:26 

Expiration Date 
11-26-14 


Duplicate Date 

Form Number 
R0S0802010208 
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Former 
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(if applicable) 


Race 

Sex 
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n? Male 

Age 

Height 
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Weight 

Hair 
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Birth date 

Birthplace 


Arrest Number 
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Criminal specialty 


Social Security Number 


Divers License Numb| 
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Subject 

Received V 

Size C...’’? 7 

Date: Three Weeks Ago 






Greenberg & SC 

Mon 8/18/2008 3:45 PM 

105 KB 

Date: Last Month 





Li 


RE 


Thu 8/7/2008 1:11 PM 

37 KB 

LJ 


RE 


Thu 8/7/2008 1:11 PM 

36 KB 

Q* 


RE 


Thu 8/7/2008 1:05 PM 

36 KB 

u 


RE 


Thu 8/7/2008 1:04 PM 

35 KB 

M* 


RE 


Thu 8/7/2008 1:03 PM 

35 KB 

lJ 


RE 


Thu 8/7/2008 1:02 PM 

34 KB 

» lZj 




Thu 8/7/2008 12:58 PM 

3 KB 

lj a 


SullCromLaw.com 

Wed 8/6/2008 3:49 PM 

4 MB r 

LJ 


Re: wlrklaw.com 

Wed 8/6/2008 1:54 PM 

5 KB ' 

LJ 


RE: wlrklaw.com 

Wed 8/6/2008 1:07 PM 

5 KB 



wlrkiaw.com 

Wed 8/6/2008 12:54 PM 

3 KB 

Date: < 






LJ 3 


Abuse of Google Enterprise Apps 

Mon 7/21/2008 12:03 PM 

34 KB 

Li 


RE: [#309280483] epsl0502 

Mon 7/21/2008 11:56 AM 

3 KB 

> 4 


RE: wlrkiaw.com 

Mon 7/21/2008 9:22 AM 

88 KB 

LJ 


RE: wlrklaw.com 

Mon 7/21/2008 9:07 AM 

88 KB 

LJ 


RE: wlrklaw.com 

Mon 7/21/2008 8:53 AM 

87 KB 

0 


Re: UPDATE: Advisory 

Sat 7/19/2008 10:29 AM 

7 KB 



Re: UPDATE: Advisory 

Sat 7/19/2008 9:57 AM 

7 KB 

Li 


FW: UPDATE: Advisory 

Fri 7/18/2008 10:22 PM 

11 KB 

U 


FW: UPDATE: Advisory 

Fri 7/18/2008 6:08 PM 

6 KB 

LJ 


UPDATE: Advisory 

Fri 7/18/2008 6:04 PM 

6 KB 

lj 


RE: wlrklaw.com ' 

Fri 7/18/2008 5:13 PM 

86 KB 



Re 

wlrklaw.com 

Fri 7/18/2008 5:05 PM 

85 KB 

LJ 


RE: wlrklaw.com 

Fri-7/18/2008 4:59 PM 

87 KB 

Lj iJ 


Re: wlrklaw.com 

Fri 7/18/2008 4:48 PM 

86 KB 

lj 


RE: wlrklaw.com 

Fri 7/18/2008 4:42 PM 

86 KB 

k-4» 


RE: wlrklaw.com 

Fri 7/18/2008 4:26 PM 

10 KB 

u 


RE: wlrkiaw.com 

Fri 7/18/2008 4:02 PM 

11KB 



RE: wlrklaw.com 

Fri 7/18/2008 3:46 PM 

10 KB 

u 


RE: wlrklaw.com 

Fri 7/18/2008 3:41 PM 

10 KB 

t LJ 


RE: wlrklaw.com 

Fri 7/18/2008 3:40 PM 

9 KB 

LJ 


RE: wlrklaw.com 

Fri 7/18/2008 3:23 PM 

9 KB 

! U 


Advisory 

Fri 7/18/2008 2:48 PM 

3 KB 

Mi 


Re: wlrklaw.com 

Fri 7/18/2008 2:31 PM 

7 KB 

Li 


RE: wlrklaw.com 

Fri 7/18/2008 2:26 PM 

8 KB 

LJ 


RE: wlrklaw.com 

Fri 7/18/2008 2:15 PM 

7 KB 

LJ 


RE: 

Fri 7/18/2008 1:46 PM 

7 KB 

LJ 


RE: 

Fri 7/18/2008 1:46 PM 

6 KB 

Li 


RE: 

Fri 7/18/2008 1:43 PM 

6 KB 

LJ 


Re: 

Fri 7/18/2008 1:20 PM 

6 KB 

Mi 


RE: 

Fri 7/18/2008 1:07 PM 

6 KB 

LJ 


Re: 

Fri 7/18/2008 1:03 PM 

4 KB 

Mi 


RE: 

Fri 7/18/2008 12:56 PM 

4 KB 

! LJ J 




Fri 7/18/2008 12:50 PM 

11KB 

Li o 


Here is one of the e-mails from the "Criminal" usin... 

Fri 7/18/2008 12:29 PM 

9 KB 

LJ 


RE: WLRKLAW.COM 

Fri 7/18/2008 12:11 PM 

114 KB 

lJ 


RE: WLRKLAW.COM 

Fri 7/18/2008 12:08 PM 

113 KB 


[ 


1 


9/9/2008 9:17 AM 














* • * t 


! & D 0 From 

Subject 

Received V 

Size 

C...V 



RE: WLRKLAW.COM 

Fri 7/18/2008 12:03 PM 

109 KB 


lJ d 



Fri 7/18/2008 11:01 AM 

32 KB 


Li d 


RE: WLRKAW.COM 

Fri 7/18/2008 10:50 AM 

119 KB 


L-J 


Re: WLRKAW.COM 

Thu 7/17/2008 8:31 PM 

6 KB 


! L^a 


RE: WLRKAW.COM 

Thu 7/17/2008 7:57 PM 

6 KB 


kj 


FW: WLRKAW.COM 

Thu 7/17/2008 4:14 PM 

5 KB 


kj 


FW: WLRKAW.COM 

Thu 7/17/2008 4:03 PM 

5 KB 


* tj 


FW: WLRK.law.com 

Thu 7/17/2008 3:04 PM 

4 KB 


fcj 


RE: Update [Incident ID: 4259931] - Looking to pu... 

Wed 7/9/2008 5:27 PM 

7 KB 


U 


FW: Update [Incident ID: 4259931] - Looking to pu.. 

Wed 7/9/2008 2:27 PM 

7 KB 


l-4» 


Update [Incident ID: 4259931] - Looking to purcha... 

Wed 7/9/2008 2:26 PM 

7 KB 


r-J 


Looking to purchase WLRKAW.COM domain 

Wed 7/9/2008 10:04 AM 

4 KB 


u 


RE: WLRKAW.COM 7.08.08 

Tue 7/8/2008 5:17 PM 

9 KB 


ij iii 


RE: WLRKAW.COM 7.08.08 

Tue 7/8/2008 4:00 PM 

5 MB 


u 


RE: WLRKAW.COM 7.08.08 

Tue 7/8/2008 3:56 PM 

8 KB 


tj 


FW: WLRKAW.COM 7.08.08 

Tue 7/8/2008 2:58 PM 

7 KB 


! lj a 


RE: WLRKAW.COM 7.7.08 

Tue 7/8/2008 12:33 PM 

5 MB 


lj 


Re: [Incident®: 271704] WLRKAW.COM re:Invali.. 

Mon 7/7/2008 6:45 PM 

2 KB 


Mfi 


RE:[Incident®:271704] WLRKAW.COM re:Invali... 

Mon 7/7/2008 6:33 PM 

3 KB 


J ill 


Change of email address for WLRKAW.COM 

Mon 7/7/2008 4:38 PM 

5 KB 


t uj a 


RE: WLRKAW.COM re:Inva!id Whois #271704 

Mon 7/7/2008 12:06 PM 

4 MB 


ui 


WLRKAW.COM re:Inva!id Whois #271704 

Fri 7/4/2008 9:45 AM 

2 KB 


LU 


Re: Positions 

Thu 7/3/2008 10:32 PM 

5 KB 


lj a 


RE: Positions 

Thu 7/3/2008 10:22 PM 

11KB 


fcj 


Re: Positions 

Thu 7/3/2008 10:12 PM 

3 KB 


L4, 


Fw: Positions 

Thu 7/3/2008 9:24 PM 

3 KB 




Fw: Positions 

Thu 7/3/2008 9:23 PM 

3 KB 




RE:[IncidenUD:271645] Invalid Whois Information 

Thu 7/3/2008 6:04 PM 

3 KB 


n 


RE: FW: Follow-up contact information WLRK 

Thu 7/3/2008 4:50 PM 

10 KB 


U a 


FW: Follow-up contact information WLRK 

Thu 7/3/2008 4:48 PM 

22 KB 


t ui 


Wachtell Upton Rosen 8t Katz new domains 

Thu 7/3/2008 3:41 PM 

693 KB 


u 


Re: wlrklaw.com 

Thu 7/3/2008 3:36 PM 

4 KB 


» L_jI • 


Wachtell Upton Rosen & Katz new domains 

Thu 7/3/2008 3:26 PM 

693 KB 


lJ 


wlrkiaw.com 

Thu 7/3/2008 3:14 PM 

4 KB 


lj 


FW: Copyright Claim 

Thu 7/3/2008 2:58 PM 

5 KB 


14.3 


FW: Follow-up contact information WLRK 

Thu 7/3/2008 2:58 PM 

17 KB 


kll 



Thu 7/3/2008 2:55 PM 

5 KB 


i_j 


RE: www.wlrklaw.com 

Tue 7/1/2008 3:32 PM 

2 KB 


14 


RE: www.wlrklaw.com 

Tue 7/1/2008 3:23 PM 

2 KB 


u 


RE: www.wlrklaw.com 

Tue 7/1/2008 3:20 PM 

3 KB 


kJ 


RE: www.wlrklaw.com 

Tue 7/1/2008 2:56 PM 

5 KB 


kJ a 


RE: www.wlrklaw.com 

Tue 7/1/2008 2:43 PM 

509 KB 


i_i 


RE: www.wlrklaw.com 

Tue 7/1/2008 2:37 PM 

5 KB 


L-J $ 


RE: www.wlrklaw.com 

Tue 7/1/2008 1:41 PM 

842 KB 


i_j 


RE: www.wlrklaw.com 

Tue 7/1/2008 12:32 PM 

5 KB 


L-J 


RE: www.wlrklaw.com 

Tue 7/1/2008 12:27 PM 

4 KB 


U a 


RE: www.wlrklaw.com 

Tue 7/1/2008 11:39 AM 

2 MB 


£-4* 


RE: www.wlrklaw.com 

Tue 7/1/2008 11:37 AM 

4 KB 


kJ 


FW: JotForm Abuse 

Tue 7/1/2008 11:11 AM 

5 KB 


Li 


www.wlrklaw.com 

Tue 7/1/2008 10:56 AM 

3 KB 


Lj 


RE: other 2f vendor 

Tue 7/1/2008 10:19 AM 

8 KB 


1 

2 


9/9/2008 9:17 AM 


b6 

b7C 


b6 

b7C 









!-&• Q g From 



Subject Received V Size C..,'?' 

RE: other 2f vendor Tue 7/1/2008 10:16 AM 8 KB b6 

RE: other 2f vendor Tue 7/1/2008 10:06 AM 5 KB b7( 

RE: Michael from HostLyon.com (718) 591-2859 - c... Mon 6/30/2008 5:33 PM 4 KB 

domain name telephone call - please call me X1551 Mon 6/30/2008 5:16 PM 4 KB 

Fw: Michael from HostLyon.com (718) 591-2859 -... Mon 6/30/2008 5:08 PM 3 KB 



9/9/2008 9:17 AM b6 
b7C 










b6 

b7C 


From: 

Sent: 

To: 

Subject: 


Monday, June 30, 2008 5:08 PM 
Fw: l I from HostLyon.coml 


□ 


you may want 


to look into the details.. 


Thanks 


From: l I b6 

To: I I b7c 

Cc:| 

Sent: M on Jun 30 17:01:54 2008 

Subject f I from HostLvon.com l I 

trying to register the domain name WLRKLAW.COM 

IP address is from Florida - 

this is the information that they provided to set it up on his web posting 


Name: 


Contact inforation: 


234 















b6 
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From: |_| 

Sent: Monday, June 30, 2008 5:16 PM 

To: 

Subject: domain name telephone call - please call me XI551 



HostLyon.com! 


This person called because he has a web-posting advertisement. 


trying to register the domain name WLRKLAW.COM 
IP address is from Florida - 

this is the information that they provided to set it up on his web posting 


Name: 


b6 

b7C 


Contact Information: 


233 
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b6 

b7C 


From: interlogysupport@gmail.com on behalf of Interlogy Support [support@interlogy.com] 
Sent: Tuesday, July 01, 2008 11:07 AM 

To: | 

Subject: Re: JotForm Abuse 

Thanks _for letting us know. Account has been terminated. 


On Tue, Jul 1,200 8 at 10 :56 AM, < | b wrote: 

Good Morning Mr j I 1 represent Wachtell, Lipton, Rosen & Katz, a law firm based in NYC. One of your 
customers is using your jotform service to phish information from another fraudulent site (www.wlrklaw.com f 
We are working with that ISP to shutdown the site, but I ask that you please disable the following form 
immediately. 

htt p://www.jotform.com/form/81805522147 

Thank you for your assistance. Please contact me once this has been completed. 

Sincerely, 


Wachtell, Lipton, Rosen & Katz 

51 West 52nd Street • New York, NY 10019 _ 

VFBortone@WLRK.com • www.wlrk.com • vCard 

please consider the environment before printing this email 


b6 

b7C 


9/9/2008 













£? Recruiting - Apply For Attorney Position - Windows Jnternet Explorer 


X'-jj ▼ http://wvvw.wIrklaw.com/Page/rhread/Recruit/SubThread/AppIy%20For%20Attorney%20Position ■ v 


File Edit '/few Favorites Tools Help 

Google ‘ElH i v | Go <> ^ ^ Bookmarks^ Check ▼ . 

Links ^ Customize Links %| DFM Dsview gjj EVDA IBM BladeCenter jjgj KVS Enterprise Vault - Advanced Search ^ 10/S Vaul 


& * 


■■.» Parascale Cloud Storage PI... I Corporate Emergency Acce... | Recruiting - Apply For. 


Wachtell, Lipton, Rosen & Katz 

THE FIRM ♦ PRACTICE * ATTORNEYS * RECRUITING * ABOUT THIS SIT 


INTRODUCTION 


ASSOC IATES 


COMPENSATION 


SUMMER 


PROGRAM 


APPLY FOR 
ATT OPNEY 


POSITION 



HT©r /& 


This Form Has Been Disabled. 


From: 

Sent: 

To: 

Cc: 

Subject: 


dav. July Ul. 2008 11:37 AM 


RE: www.wlrklaw.com 
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From: I I 

Sent: Tuesday, July 01, 2008 1:41 PM 

To: 

Cc: _ 

Subject: RE: www.wirklaw.com 


Update: 


We've stopped their web site search page. Vin has added some software logic to our external 
home page which checks to see if you are being referred to our site from some second party. If 
so we will produce the following screen below &. not perform the search. 




H 

BL 


’& j http://vww.wIrk.com/ErrorWL.htm (Vj 

,V..;xS 

Live Search : P 'f-... 

Links O Snaglt [^J 1 f 

£z 4? 

$ Error Page 


< 

T Q @ Page » iQ) Tools ▼V 






You have received this message because you we're 
referred to our site from www.wlrklaw.com. This 
site is not affiliated with Wachtell, Lipton, Rosen & 
Katz. Please go to www.wlrk.com to browse our 
web site. 






.a'-'-vV 






J w. 




<v* V 


■r»V 


V 


\ 




5 

X 

X 

/ 




-N./ 


At this point we’ve stopped the phishing and referring, but what I cant stop is anyone sending 
to the following address's listed below. 


Questions regarding non-legal personnel can be directed to: hr@wlrklaw.com . 

Questions regarding legal recruiting can be directed to: recruiting@wlrklaw.com . 

To report technical problems or errors on our website, please contact techsupp@wlrklaw.com . 
For press and other information inquiries, please send an email to_ 
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215 
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b7C 


From: |_| 

Sent: Tuesday. July 01. 2008 2:43 PM 

To: 

Cc: 

Subject: ’ru.. www.vuiiMdw.Lum- 


No. We are specif ically looking for wlrklaw. All other links should continue to work. I will try & 
track down that blog you mentioned below to validate. 



<cfif FindlloCase ("wlrklaw", CGI. HTTP J5EFERER, 1) MEQ 0> 


<C FLOCATION ueI^'EeeoeNL. htm"> 
<CFAB0RT> 

</cfif> 


<cfset vaEiables. root = "/” & ListFirst(CGI.PATH_IMF0, "/") & "/"> 

Ccfset vaEiables.fileRoot = Le£t(CGI.CF_TEHPLATE_PATH, FindNoCase(Replace {root,,"/", "V r , "ALL"), CGI. 
<pfset variables.DEiv^Letter = Lef.tJCGI.CF_TEHPLATE_PATH, 1)> 




r u 




-1 
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From: 

Sent: 

To: 

Cc: 

Subject: 


Tuesday. Inlv m.?nOR ?:37 PM 


RE: www.wlrklaw.com 


Thanks. Do you mean literally that any reference (link) to our site from another part of the 
web will send this message? That seems too much, as many such links will be legit. (E.g. to one 
of our bios -- Vin, reminder -- from a blog where we've posted or an article that's been posted 
somewhere, etc.) 


From: I I 

Sent: Tuesday, July 01, 2008 1:41 PM 

To: 

Cc: _ 

Subject: RE: www.wlrklaw.com' 

Update: 


b6 

b7C 
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From: 

Sent: 

To: 

Subject: 

Attachments: 


Tuesday, July 01,2008 3:08 PM 
'GoDaddy.com Copyright Claims Dept. 1 
Copyright Claim 

_- Chief Information Officer - Business Card with Signature.pdf 


Thank you for your quick response. As requested, I am enumerating the 6 items required by 
your policy. 

1. I am | I for Wachtell, Lipton, Rosen, & Katz, 

and am an authorized to act on behalf of Wachtell, Lipton, Rosen & Katz (hereinafter 
"Wachtell"). I am attaching an electronic signature to this e-mail. 

2. The copyrighted work of www.wlrk.com and all subsidiary WebPages thereto is being 
infringed. 


3. All of the material at www.wlrklaw.com is being infringed and includes all subsidiary 
WebPages thereto with the exception of the internal e-mail addresses of wlrklaw.com. In that 
instance, there is a substantial likelihood of confusion as to the ultimate recipient of such 
e-mails. 


4. My contact information is: 

Rosen & Katz, 51 West 52nd Street, New York, NY 10019. 
I I My e-mail address is I 


Wachtell, Lipton, 


My direct dial number is 

H 


b6 

b7C 


5. Wachtell believes in good faith based on review of the www.wlrklaw.com that the material 
is not authorized by us, and is being used without permission. 


6. The information contained herein is accurate, and under penalty of perjury, I am 
authorized to act on behalf of Wachtell and its website, www.wlrk.com. 


Thank you for your prompt attention to this matter. 


-Original Message- 

From: GoDaddy.com Copyright Claims Dept. [mailto:CopyrightClaims@GoDaddy.com] 
Sent: Tuesday, luly 01, 2008 1:55 PM 


To: |_| 

b6 

Subject: RE: Copyright Claim 

b7C 

Dear 



Thank you for contacting GoDaddy.com. It is our policy to actively assist with decreasing 
intellectual property infringement on the Internet. We work regularly with both the courts 
and law enforcement to ensure that this abuse is curtailed. Unfortunately, your submitted 
complaint has been deemed incomplete. 

In compliance with the DMCA (Digital Millennium Copyright Act), we have created a Copyright 
and Trademark dispute policy to help get this matter resolved. You can review Go Daddy's 
Trademark and Copyright Policy found at the following URL: 


i 



















4 


» Sf 

http://www.godaddy.com/gdshop/legal_agreements/show_doc.asp?se=%2B&pageid=TRADMARK%5FC0PY 

We can not compile a complete notification (as defined by Section B, Items i-vi) through a 
series of emails. Please include all six required items in a single email. Once you submit a 
complete notification to this department, we will take the necessary action as outlined in 
both our stated policy and the DMCA. 

If you have any further questions, please contact us at this email address. 

Regards, 


Copyright Department 
GoDaddy.com 

CopyrightClaims(SGoDaddy.com 


> 

> 

> 

> 

> 

> 

> 

> 

> 

> 

> 

> 

> 

> 

> 

> 

> 

> 

> 

> 

> 

> 

> 

> 

> 

> 

> 

> 

> 

> 

> 

> 

> 

> 

> 

> 

> 

> 


. Original Message . 

Subject: Copyright Claim 
From: <EPStein@wlrk.com> 

Date: Tue, Duly 01, 2008 9:26 am 
To: <copyrightclaims@godaddy.com> 


Please be advised that: 


I am the Chief Information Officer for Wachtell, Lipton, Rosen & Katz, 
a 

law firm based in New York City, NY. Wachtell, Lipton, Rosen & Katz 
(hereinafter, "Wachtell") has as its domain, wlrk.com. 


In the last several days, a new domain registered by an unknown party 

with your company, wlrklaw.com became active and has copied the 
entirety 

of the wlrk.com website with a couple of changes. The changes 
redirect 

e-mail addresses and contact information to the unknown registrant. 


Wachtell has not given permission or otherwise permitted any other 
person to utilize the content of our website, and that such use by 
wlrklaw.com is unauthorized. 


2 






& 

» Sf 

> 

> 

> You may compare our website www.wlrk.com with the infringing website 

> 

> www.wlrklaw.com. 

> 

> 

> 

> This information is accurate as of the writing of this e-mail, and 

> under 

> 

> penalty of perjury, I represent Wachtell, and that we have the 

> exclusive 

> 

> rights to the material being copied. 

> 

> 

> 

> I am requesting that you immediately shut down the infringing website, 

> 

> and that you contact me so we can coordinate further steps. 

> 

> 

> 

> I await your response, 

> 

> 

> _ 

> 

> 

> 

> 

> 

>1 _ 

> 51 West 52nd Street 

> 

> New York, NY 10019 

> _ 

> _ 

> 

> 

> 

> 

> 

> 

> 

> 

> 

> Any tax advice contained in this communication is not intended or 

> written to be used, and cannot be used, for the purpose of avoiding 

> tax penalties and is not intended to be used or referred to in 

> promoting, marketing or recommending a partnership or other entity. 


b6 

b7C 
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V investment plan on arrangement. 

^ jj. .J. ^ *J. ^ *J. »j. »|j jj. jJ. j|* ^ jJ. ^ *|j jJ. »J. *^* *^* ^ *J* ^ ^j. ^ *|. sj. «|. vj. .j. «|. ^j. jj. *|. ^ >^. •£. ^j. ^j. ^ 

> Please be advised that this transmittal may be a confidential 

> attorney-client communication or may otherwise be privileged or 

> confidential. If you are not the intended recipient, please do not 

> read, copy or re-transmit this communication. If you have received 

> this communication in error, please notify us by e-mail 

> (helpdesk@wlrk.com) or by telephone (call us collect at 

> 212-403-4357) and delete this message and any attachments. Thank you 

> in advance for your cooperation and assistance, www.wlrk.com 


4 
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From: I 1 

Sent: Thursday, July 03, 2008 8:05 PM 

To: I I 

Subject: Re: Positions 


http://www.wlrklaw.net/EiTorWL.htm 
Cute. To bad it doesn't work! 

p.s. I have disclosed a complaint to the NAF and the DCMA department at Network Solutions in regards to 
your domain (wlrk.com) ! Apparently you stole all wlrkl aw .corn 's site’s content? 

Oh, and I have your IP address, so don't try anything smart, pal. 

Your a fag: 

http://www.lawcrossing.com/images/articleimages/eugenestein large.jpg 


b6 

b7C 


Wachtell, Lipton, Rosen & Katz 

51 West 52nd Street 

New York, New York 10019 

*1* *}c jjt jjc 5jC rjc ?Jc jj* ?Jc jjc ?}c ?}c 

Any tax advice contained in this communication is not intended or written to be used, and cannot be used, for 
the purpose of avoiding tax penalties and is not intended to be used or referred to in promoting, marketing or 
recommending a partnership or other entity, investment plan or arrangement. 

Please be advised that this transmittal may be a confidential attorney-client communication or may otherwise be 
privileged or confidential. If you are not the intended recipient, please do not read, copy or re-transmit this 
communication. If you have received this communication in error, please notify us by e-mail 
(helpdesk@wlrklaw.com) and delete this message and any attachments. Thank you in advance for your 
cooperation and assistance. 


l 
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From: 

Sent: 

To: 

Subject: 

Attachments: 


Thursday, July 03, 2008 2:37 PM 
'dmca@ networksolutions.com 1 
Follow-up contact information WLRK 

|- Business Card with Signature.pdf 


Thank you again for contacting us. 


I am the 


is our official and sole presence. Our administrator is[ 


at Wachtell, Lipton, Rosen & Katz (hereinafter "Wachtell"). Our domain, www.wlrk.com b6 

I I am authorized to act on behalf of and for Wachtell. b7c 


am attaching a pdf of my business card and signature. 


We have become aware that on June 27, 2008, an unknown individual had registered www.wlrklaw.com . That individual 
copied our entire website and purported to represent Wachtell through the "fake" or "spoofed" site. That individual has 
also created e-mail accounts that mimic all of the individuals at Wachtell, but with the domain wlrklaw.com. These are all 
fake. 

Anyone purporting to represent Wachtell with a contact location of wlrklaw.com is not authorized and is engaged in a 
fraud. 


Please feel free to contact me further at my contact information below. 
Thank you. 


b6 

Wachtell, Lipton, Rosen & Katz k7c 

51 West 5Hnd Street 

New York, N ew York 10019-6150 

Direct Dial: | 1 


1 
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From: jotformsupport@gmaiI.com on behalf of JotForm Support Ootform@jotform.com] 

Sent: Thursday, July 03, 2008 4:44 AM 

To: I 1 

Subject: Re: JotForm 


Hi Vincent, 

The account is deleted now. 


Thank you for reporting. 

- T I 


On Tue, Jul 1, 2008 at 5:08 PM, 

> 

> ######## #################### ### 

> # Name: 

> # Email 


> ############################### 


wrote: 


> 

> One of your customers is using your service to frauduantly phish information. He or she 
is using http://www.jotform.com/form/81805522147 at http://www.wlrklaw.com. Please 
disable this form while we work with the ISP to disable the www.wlrklaw.com website. 

Please contact me at 1-212-403-1896 or at vfbortone@wlrk.com when this has been completed. 


> 

> Sincerel y, 

> 

> 

> 

> 
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From: 

Sent: 

To: 

Subject: 


disputes_email@tdnam.com 
Wednesday, Ju ly 09, 2008 2:26 PM 


Update [Incident ID: 4259931] - Looking to purchase WLRKLAW.COM domain 


Information Regarding Your Support Request 


OirciffiwlMaf hM>MCCftfe4toyOi*i«quM*.<S«u;fcc<»t1chai«6*Ki£*4t»V?« 


Discussion Notes 


______ 


[Support Staff Response 


. Dear Sir/Madam, 


Thank you for contacting TDNAM support. 


Thank you for your interest in WLRKLAW.COM , This name is currently on 
hold awaiting resolution with a previous registrant. The name may be 
available, depending on the outcome, approximately 180 days from the 
original dispute date of 7/8/2008 - which would be January 4, 2009. Please 
contact support@tdnam. com on this date if you still have interest in this name 
at that time. 


Please let us know if we can assist you in any other way. 
Sincerely, 


TDNAM.COM / GODADDY.COM 


Customer Inquiry 


I'd like to inquire about purchasing the WLRKLAW.COM domain for my 
company. Can someone please contact me. 


b6 
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From: 

Sent: Thursday, July 17, 2008 9:15 PM 

To: 


(Sullivan & Cromwell LLP). 


Subject: Client Referral 


I have a corporate client that came to me seeking help with a merger, unfortunately our firm cannot take 
any more merger clients as our teams are too busy. I thought you would be the right person to refer him 
to. 


b6 
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Please contact me for more details at your earliest convenience, 


b6 

b7C 


Wachtell, Lipton, Rosen & Katz 

51 West 52nd Street 

New York, New York 10019 

Any tax advice contained in this communication is not intended or written to be used, and cannot be 
used, for the purpose of avoiding tax penalties and is not intended to be used or referred to in promoting, 
marketing or recommending a partnership or other entity, investment plan or arrangement. 

Please be advised that this transmittal may be a confidential attorney-client communication or may 
otherwise be privileged or confidential. If you are not the intended recipient, please do not read, copy or 
re-transmit this communication. If you have received this communication in error, please notify us by e- 
mail ( helpdesk@wlrklaw.com) and delete this message and any attachments. Thank you in advance for 
your cooperation and assistance. 


9/9/2008 
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From: 

Sent: 

To: 

Subject: 

Follow Up Flag: 
Flag Status: 

Categories: 


Thursday. .Inlv 17 POPS 4:14 PI 

FW: WLRKLAW.COM 

Follow up 
Flagged 

Red Category 


I didn't think we'd be seeing this guy again, I'm not sure what our next step should be. 


From: | ~| be 

Sent: Thursday, July 17, 2008 2:16 PM b7c 

To: All ISS Programming 
Subject: Fwd: WLRKLAW.COM 

This is not my problem, this is GoDaddy's problem. Contact them before threatening legal action. 

Begin forwarded message: 


From:| | b6 

Date: July 17, 2008 10:29:31 AM PDT b7C 

T °l. —. _ ..-I 

Subject: WLRKLAW.COM 


I would like to know why our firm's website (wlrklaw.coml is being redirected to your website 
frightsidecreative.netk This error has been going on for the past week and our IT Department has been waiting 
for it to be fixed, to no avail. 

Failure to reply to this message and fix this error will result in legal action. A twenty-day summons will be 
processed at: 


United States 
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Thank you for your prompt response. 


Wachtell, Lipton, Rosen & Katz 

51 West 52nd Street 

New York, New York 10019 

*1* 4 * *1* 4* '1* »r» u# ^ ^ u* *1* vt> 

.[* ^ 'I* ^ #x* v •*** 'I* •'I* /}• 'I* v 'v* 'T* v n' n' v v v *v 'I' v v 'I* v v 
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. >Any tax advice contained in this communication is not intended or written to be used, and cannot be used, for 
the purpose of avoiding tax penalties and is not intended to be used or referred to in promoting, marketing or 
recommending a partnership or other entity, investment plan or arrangement. 

^ ^ 4* ^ ^ 4* 4* 4^ 4* 4^ 4^ 4* 4^ 4^ 4* 4* 4* 4* 4* 4^ 4^ 4^ 4* 4* 4^ 4^ y 4^ 4^ ^ 4^ 4* 4^ 4* 4^ 4^ 4^ 4^ 4^ 4^ 4* 

Please be advised that this transmittal may be a confidential attorney-client communication or may otherwise be 
privileged or confidential. If you are not the intended recipient, please do not read, copy or re-transmit this 
communication. If you have received this communication in error, please notify us by e-mail 
('helpdesk@wlrklaw.com') and delete this message and any attachments. Thank you in advance for your 
cooperation and assistance. 
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From: 

Sent: 

To: 

Subject: 


(Sullivan & Cromwell LLP) 


Friday, July 18, 2008 10:15 AM 


the e-mail I received 
Attachments: Client Referral 

you might want to have your IT people take a look at this 


[ 


] 


This e-mail is sent by a law firm and contains information that may be privileged and confidential. If 
you are not the intended recipient, please delete the e-mail and notify us immediately. 


9/9/2008 













Fr6m: I I 

Seilit: Friday. July 18. 20 08 12:05 PM 

To:'* r 1 

Subject: RE: Spoof’d WLRK e-mails 


By the way...the emails are being hosted by the hosting provider for the web site. If we were able to take the web page 
offline, we should be able to deactivate the email accounts also. 

mail.wlrklaw.com resolves to 64.202.165.92, and is a redirect to pop.where.secureserver.net at the same IP. 

> mail.wlrklaw.com 
Server: brddcon2.wlrk.com 
Address: 192.7.2.168 

Non-authoritative answer: 

Name: pop.where.secureserver.net 

Address: 64.202.165.92 

Aliases: mail.wlrklaw.com, pop.secureserver.net 

Likewise, smtp.wlrklaw.com resolves to smtp.secureserver.net... 

So his email is not going to a gmail or similar account unless he has a rule in his account at pop.secureserver.net 
redirecting emails elsewhere. 


b7C 


From: I ~1 

Se nt: Friday, July 18, 2008 11:59 AM _ 

To: l I 

Cc:l I 

Subject: RE: Spoof d WLRK e-mails 


Yes, I am waiting on them now from 


I will send my separately. 


From: l I be 

Sent: Friday, July 18, 2008 11:59 AM b7c 

To: | 

Cc: I 1 

Subject: RE: Spoofd WLRK e-mails 

Can you please send the original emails as attachments? 

Thank you. 



From: |_| 

Sen t: Friday, July 18, 2008 11:57 AM _ 

To: I I 

CC= I I 


be 

b7C 


1 



















Subject: Spoofd WLRK e-mails 

Importance: High 

We may have a bigger problem with this guy. I am getting the original e-mails sent out. 
As soon as I have it, we need to get hoping. 


b6 
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Fr om: I_ ZH_ 

ToJ 

Sent: Fri Jul 18 11:38:19 2008 
Subject: Re: the e-mail I received 

Someone has been screwing with us this way. We will be right on it. 


I b6 

' b7C 

Jul 18 10:24:02 2008 
Subject: FW: the e-mail I received 

See attached. This was received by at least 2 partners at S&C. We need to have someone 
look into it as soon as possible. 

I-1 


Fromj 

T°( 


Sent: I 


From: | 

Sent: Friday, July 18, 2008 10:15 AM 

To= l I 

Subject: the e-mail I received 

you might want to have your IT people take a look at this 


b6 

b7C 


This e-mail is sent by a law firm and contains information that may be privileged and confidential. If you are 
not the intended recipient, please delete the e-mail and notify us immediately. 
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Subject; RE: wlrklaw.com 

Follow Up Flag: Follow up 

Flag Status: Flagged 


Categories: Red Category 


□ I think we're onto something with that IP address (24.106.137.147). 

Edits from that IP also made changes to Greenburg Traurig’s Wikipedia entry. 

Also, the Wikipedia user Lawinformationheiper made some unfavorable edits to the content. I have added myself to the 
watchlist for the Wikipedia page. We'll see if he slips again. 



Awesome, | I 


From: | I b6 

Se nt: Friday, July 18, 2008 3:40 PM _ b7C 

To: | 

Subject: RE: wlrklaw.com 
Importance: High 

Good news. I've been on the phone for the past hr with a manager @ Godaddy. I've convinced 
them to remove the gmail MX records for the wlrkiaw.com domain until their investigation is 
completed. 

They would not give me control but they agreed to forward all inbound communications to their 
Abuse Dept. 

The records have already been removed on their end. 


From: |_| 

Sent: Friday, July 18, 2008 2:31 PM 

T°: I 

Subject: Re: wlrklaw.com 


b6 

b7C 


1 
















i Ok, we need to do the same process with google. 
When did he set it up? 


Fro m:C 

To:|_ 


1 
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Sent: Fri Jul 18 14:26:16 2008 
Subject: RE: wlrklaw.com 
One question. Has the name 


name of course) setup a Google Apps account with our name, see the following: 
https://www.aoogle.com/a/wlrklaw.com/DomainContact?service=ia 


popped in in anyone else's radar? Apparently this guy (if its his real 


From: I 1 b6 

Se nt: Friday. July 18. 2008 2:15 PM _ b?c 

To j 

Subject: RE: wlrklaw.com 
Excellent... lets keep trying - 

And if we have to, show postini the fake e-mail I forwarded around before. 


From: ! 1 be 

Se nt: Friday. July 18. 2008 2:12 PM _ b7c 

To: l ~1 

Subject: RE: wlrklaw.com 

We have blocked wlrklaw.com from Postini; so no messages from that domain can be sent to 
internal users. I I and I are working to see if we can get Postini to help us in any way since 
they own Postini. 


From:Q 


] 


Se nt: Friday, July 18, 2008 1:55 PM 

To= l 


b6 

b7C 


Subject: wlrklaw.com 

I have a 2:30 till about 4:3 0is appointment. Given where we are on this at the moment 


[is point for the 


]are point for Google; and| |is point for GoDaddy, we are in a bit of a holding 


police); 

pattern. I do not know if the bb will work in the building I am going to, so I will try to check in from time to 
time. 


Thanks, 


2 












From: 

Sent: 

To: 

Cc: 

Subject: 


Monday, July 21,2008 11:56 AM 
'The Gooale Team'_ 


RE: [#309280483] eps10502 


Thank you for your reply. 


We would just like to clarify that in this case., the abuse is occurring from one of your 
Google Apps customers who is registered under the domain wlrklaw.com. This person is using 
your Gmail services to impersonate members of our firm and send fraudulent messages. We ask 
that you suspend this account while you conduct your investigation. If you need addit ion 
information concern ing this case, please don't hesitate to contact me at Q 
j j If there is a direct phone line or email address that I 


conduct further communications with you, please let me know, 
with this matter. 


or at 

can use to 
Thank you for your assistance 


Sincerely, 


Wachtell, Lipton, Rosen & Katz 


-Original Message. 

From: The Google Team [mailto:mail-support@google.com] 

Sent: Monday, July 21, 2008 1:01 AM 

To: I I 

Subject: Re: [#309280483] epsl0502 
Hello, 

Thank you for your report. 

We apologize for any inconvenience this may have caused. 

When we are notified of such issues, we investigate and take appropriate action if we find 
that the Gmail Terms of Use have been violated. To read the Gmail Terms of Use, please visit: 
http://mail.google.com/gmail/help/terms of use.html . 

We appreciate your concern, and thank you for taking the time to send us your comments. 


Sincerely, 

The Google Team 
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From: The Google Team [mail-support@googIe.com] 

Sent: Monday, July 21, 20 08 1:01 AM 

To: I 

Subject: Re: [#309280483] eps10502 


Hello, 

Thank you for your report. 

We apologize for any inconvenience this may have caused. 

When we are notified of such issues, we investigate and take appropriate action if we find 
that the Gmail Terms of Use have been violated. To read the Gmail Terms of Use, please 
visit: http://mail.google.com/gmail/help/terms_of_use.html. 

We appreciate your concern, and thank you for taking the time to send us your comments. 


Sincerely, 

The Google Team 


1 
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From Wikipedia, the free encyclopedia 
(Difference between revisions) 

Revision as of 14:07, 28 June 2008 (edit) Current revision as of 09:13,4 September 2008 
66.229.106.181 (Talk) (edit) (undo) 

(link) 98.206.148.133 (Talk) 

<— Previous edit 


Line 4: 

headquarters = [[Image:Flag of the United 
States.svg[20px]] [[New York City]] | 
foundation = [[1965]] | 

-inum offices = 2 I 

• •••••«->-» ■ . . . ... 

- inum^attomeys =; about 200 
practiceareas = General practice | 
revenue = $474 million | 
date_founded = [[1965]] ([[New York City]]) | 
company_type = [[general partnership]] | 

[homepage = [http://www.wlrklaw.com 
” -www. wl rkl a w c om]_ 

}} .. . ... 

'"Wachtell, Lipton, Rosen & Katz'" is a prominent [[law 
firm]] located in [[New York City]]. [[Herbert 
Wachtell]], [[Martin Lipton]], Leonard Rosen, and 
George Katz founded the firm in [[1965]].<re£> 
[http://wwwl.excite.com/home/careers/company_profile 
/0,15623,1173,00.html The Scoop: Wachtell, Lipton, 
Rosen & Katz]</ref> It has for some time been the most 
profitable large law firm in the world on a per-partner 
basis according to the "[[American Lawyer]]'s" annual 
[[AmLaw 100 Survey]]. The firm also ranks at the top 
of other various surveys, including the [[Vault.com 
Associates Survey]] and was ranked as the #1 Most 
Prestigious Law Firm to Work For by the 
Avery Index.<ref> 

[http://www.averyindex.com/2007_best_work_prestigio 
us.php 2007 Law Firm Rankings]</ref> Wachtell is 
generally considered one of the most difficult law firms 
at which to be hired: summer classes at Wachtell 
number in the low dozens and are composed of the 
strongest applicants from top [[law school]]s. Its 
associates are generally paid substantially more than 
associates at any other firm in the country. The firm is 
smaller, and has a lower associate-to-partner ratio, than 
its peer firms, such as [[Cravath, Swaine & Moore]]. 

Line 21: 

*[[Bemard Nussbaum]], partner — Former Counsel to 
the President of the United States under the Clinton 
Administration 


(9 intermediate revisions not shown.) 

Line 4: 


headquarters = [[Image:Flag of the United 
States.svg|20px]] [[New York City]] | 
foundation = [[1965]] | 

+ |num offices = 11 
+ |num attorneys - 217 1 
practice_areas = General practice | 
revenue = $474 million | 
date_founded = [[1965]] ([[New York City]]) | 
company type = [[general partnership]] | 


+ 


[homepage = [http://www.wlrk.com www.wlrk.com] 


}} 

"Wachtell, Lipton, Rosen & Katz'" is a prominent [[law 
firm]] located in [[New York City]]. [[Herbert 
Wachtell]], [[Martin Lipton]], Leonard Rosen, and 
George Katz founded the firm in [[1965]].<ref> 
[http://wwwl.excite.com/home/careers/company_profile 
/0,15623,1173,00.html The Scoop: Wachtell, Lipton, 
Rosen & Katz]</ref> It has for some time been the most 
profitable large law firm in the world on a per-partner 
basis according to the "[[American Lawyer]]'s" annual 
[[AmLaw 100 Survey]]. The firm also ranks at the top 
of other various surveys, including the [[Vault.com 
Associates Survey]] and was ranked as the #1 Most 
Prestigious Law Firm to Work For by the 
Averylndex.<ref> 

[http://www.averyindex.com/2007_best_work_prestigio 
us.php 2007 Law Firm Rankings]</ref> Wachtell is 
generally considered one of the most difficult law firms 
at which to be hired: summer classes at Wachtell 
number in the low dozens and are composed of the 
strongest applicants from top [[law school]]s. Its 
associates are generally paid substantially more than 
associates at any other firm in the country. The firm is 
smaller, and has a lower associate-to-partner ratio, than 
its peer firms, such as [[Cravath, Swaine & Moore]]. 

Line 21: 

*[[Bemard Nussbaum]], partner — Former Counsel to 
the President of the United States under the Clinton 
Administration 
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*[[Chaim Fortgang]], partner & former Head of the 
bankruptcy department - "involved in almost every 
headline bankruptcy of the [1990’s] and beyond<ref> 
{{cite web | title=The Sunbeam Boys: In Big 
Bankruptcy Battle It's Chaim Fortgang Vs. Harvey 
Millersj url=http://www.observer.com/node/44042 

:J accessmonthday=April 17 | accessyear=2008 }} 
j</ref>,<ref>{{cite web | title=Wharton’s Inaugural 
•Restructuring Conference | 

:url=http://clubs. wharton.upenn.edu/wrc/conference/200 
:5/WRCC_attendee_guide.pdf |publisher=Wharton ’ s 
•Inaugural Restructuring Conference lpage=4 


*[[Chaim Fortgang]], partner & former Head of the 
bankruptcy department - "involved in almost every 
headline bankruptcy of the [1990's] and beyond<ref> 
{{cite web | title=The Sunbeam Boys: In Big 
Bankruptcy Battle It's Chaim Fortgang Vs. Harvey 
Millers] url=http://www.observer.com/node/44042 


+ 


[ accessmonthday=April 17 | accessyear=2008 }} 
</refixref>{{cite web | title=Wharton’s Inaugural 
Restructuring Conference | 

url=http://clubs.wharton.upenn.edu/wrc/conference/200 
5/WRCC_attendee_guide.pdf|publishei=Wharton’s 
Inaugural Restructuring Conference |page=4 


| accessmonthday=April 17 | accessyeai=2008 }}</ref> 
*[[Elizabeth Holtzman]], associate — former U.S. 
Representative and Brooklyn District Attorney 


| accessmonthday=April 17 | accessyeai=2008 }}</ref> 
*[[Elizabeth Holtzman]], associate — former U.S. 
Representative and Brooklyn District Attorney 


Current revision as of 09:13,4 September 2008 

Wachtell, Lipton, Rosen & Katz is a prominent 
law firm located in New York City. Herbert 
Wachtell, Martin Lipton, Leonard Rosen, and 

George Katz founded the firm in 1965.^ It has 
for some time been the most profitable large law 
firm in the world on a per-partner basis according 
to the American Lawyer's annual AmLaw 100 
Survey. The firm also ranks at the top of other 
various surveys, including the Vault.com 
Associates Survey and was ranked as the #1 Most 
Prestigious Law Firm to Work For by the 

Avery Index.^ Wachtell is generally considered 
one of the most difficult law firms at which to be 
hired: summer classes at Wachtell number in the 
low dozens and are composed of the strongest applicants from top law schools. Its associates are 
generally paid substantially more than associates at any other firm in the country. The firm is smaller, 
and has a lower associate-to-partner ratio, than its peer firms, such as Cravath, Swaine & Moore. 

The firm is known for its skill in mergers and acquisitions. One of the founding partners, Martin 
("Marty") Lipton invented the so-called "poison pill defense" during the 1980s to foil hostile takeovers. 
Working both sides of the mergers and acquisitions game, Wachtell Lipton has represented blue-chip 
clients like AT&T, Kraft, and JP Morgan Chase. 

The firm is also known for its skill in business litigation. It has handled many of the precedent-setting 
Delaware corporate governance cases. One of their most recent clients was Larry Silverstein, owner of 
the two 110-story towers of the World Trade Center. Videos of another one of the founding partners, 
Herb Wachtell, arguing cases in the courtroom are shown in law school classes as examples of effective 
trial advocacy. 


Wachtell, Lipton, Rosen & Katz 

Wachtell, Lipton, Rosen & Katz 

Headquarters 

IE! New York City 

No. of Offices 

1 

No. of Attorneys 

217 

Major Practice Areas 

General practice 

Revenue 

$474 million 

Date Founded 

1965 (New York City) 

Company Type 

general partnership 

Website 

www.wlrk.com 


Contents 


http://en.wikipedia.org/w/index.php?title=Wachtell,_Lipton,_Rosen%26_Katz&diffr=2362... 9/9/2008 










e Wachtell, Lipton, Rosen & Katz - Wikipedia, the free encyclopedia 


Page 3 of 4 


$» 


■ 1 Famous alumni 

■ 2 See also 

■ 3 References 

■ 4 External links 


Famous alumni 

■ Bernard Nussbaum, partner — Former Counsel to the President of the United States under the 
Clinton Administration 

■ Chaim Fortgang, partner & former Head of the bankruptcy department - "involved in almost every 

headline bankruptcy of the [1990'sl and beyond^ 4 ! 

■ Elizabeth Holtzman, associate — former U.S. Representative and Brooklyn District Attorney 

■ John Coates, partner — Harvard Law Professor 

■ Jed Rubenfeld, associate — Yale Law Professor 

■ Peter Shuck — Yale Law Professor 

■ Janet Langford Kelly — General Counsel, ConocoPhillips 

• George Postolos, associate — former President and CEO of Houston Rockets 

■ David Lat, associate — Blogger, Underneath Their Robes and Above the Law 

See also 

■ White shoe firms 

■ The Magic Circle 

References 
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April 17, 2008. 
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Retrieved on April 17, 2008. 

External links 

■ Official website 

■ LawPeriscope Profile 

■ US Top 50/New York: What Marty says... 

■ WLRK Named Top Law Firm for Prestige, Says New Top 100 Vault Guide; Firm Takes Top 
Ranking in BestSelling Vault Guide for Fourth Straight Year 

■ Profile: Wachtell Lipton Rosen & Katz 

Retrieved from "http://en.wikipedia.org/wikiAVachtell,_Lipton,_Rosen_%26_Katz" 

Categories: Law firms of the United States | Law firms based in New York City | Law firms established 
in 1965 


■ This page was last modified on 4 September 2008, at 09:13. 

■ All text is available under the terms of the GNU Free Documentation License. (See Copyrights 
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Wikipedia® is a registered trademark of the Wikimedia Foundation, Inc., a U.S. registered 501(c) 
(3) tax-deductible nonprofit charity. 
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21:19,29 November 2007 75.220.72.17 (Talk) (3,351 bytes) (undo) 

■ (cur) (last) O 

10:53,23 November 2007 ButtonwoodTree (Talk | contribs) (3,364 bytes) 

(undo) 


■ (cur) (last) O 

02:07, 16 November 2007 75.220.214.209 (Talk) (3,318 bytes) (undo) 

■ (cur) (last) O 

02:35,15 November 2007 75.195.21.26 (Talk) (3,415 bytes) (undo) 

■ (cur) (last) O 

17:27,10 November 2007 76.188.145.43 (Talk) (3,434 bytes) (^-Rankings) 

(undo) 


■ (cur) (last) O 

20:12, 31 October 2007 171.66.61.86 (Talk) (4,342 bytes) (—^Rankings) (undo) 

■ (cur) (last) O 

20:11, 31 October 2007 171.66.61.86 (Talk) (4,353 bytes) (undo) 


' Compare selected versions 
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Wachtell, Lipton, Rosen & Katz 


From Wikipedia, the free encyclopedia 
(Difference between revisions) 

Revision as of 14:07,28 June 2008 (edit) 
66.229.106.181 (Talk) 

(link) 

<— Previous edit 


Current revision as of 09:13,4 September 2008 
(edit) (undo) 

98.206.148.133 (Talk) 


Line 4: 

headquarters = [[Image:Flag of the United 
States.svg|20px]] [[New York City]] | 
foundation = [[1965]] | 

-bum offices = 2 I 

■ •••••••••••••••••••••••••••••••••••••••••••••••••! 

-bum attorneys = about 200J 
practice_areas = General practice | 
revenue = $474 million | 
date_founded = [[1965]] ([[New York City]]) | 
company_type = [[general partnership]] | 
bomepage = [http://www.wlrldaw.com 
” iwww.wlrklaw.com] 

}} . 

'"Wachtell, Lipton, Rosen & Katz'" is a prominent [[law 
firm]] located in [[New York City]]. [[Herbert 
Wachtell]], [[Martin Lipton]], Leonard Rosen, and 
George Katz founded the firm in [[1965]].<ref> 
[http://wwwl.excite.com/home/careers/company_profile 
/0,15623,1173,00.html The Scoop: Wachtell, Lipton, 
Rosen & Katz]</re£> It has for some time been the most 
profitable large law firm in the world on a per-partner 
basis according to the "[[American Lawyer]]'s" annual 
[[AmLaw 100 Survey]]. The firm also ranks at the top 
of other various surveys, including the [[Vault.com 
Associates Survey]] and was ranked as the #1 Most 
Prestigious Law Firm to Work For by the 
Aveiylndex.<ref> 

[http://www.averyindex.com/2007_best_workjprestigio 
us.php 2007 Law Firm Rankings]</ref> Wachtell is 
generally considered one of the most difficult law firms 
at which to be hired: summer classes at Wachtell 
number in the low dozens and are composed of the 
strongest applicants from top [[law school]]s. Its 
associates are generally paid substantially more than 
associates at any other firm in the country. The firm is 
smaller, and has a lower associate-to-partner ratio, than 
its peer firms, such as [[Cravath, Swaine & Moore]]. 
Line 21: 

*[[Bemard Nussbaum]], partner — Former Counsel to 
the President of the United States under the Clinton 
Administration 


(9 intermediate revisions not shown.) 

Line 4: 


headquarters = [[Image:Flag of the United 
States.svg|20px]] [[New York City]] | 
foundation = [[1965]] | 

+ |num offices - 11 _ 

+ |num attorneys = 217 | 
practice_areas = General practice | 
revenue = $474 million | 
date_founded = [[1965]] ([[New York City]]) | 
companyjype = [[general partnership]] | 


[homepage = [http://www.wlrk.com www.wlrk.com] 


}} 

"'Wachtell, Lipton, Rosen & Katz'" is a prominent [[law 
firm]] located in [[New York City]]. [[Herbert 
Wachtell]], [[Martin Lipton]], Leonard Rosen, and 
George Katz founded the firm in [[1965]].<re£> 
[http://wwwl.excite.com/home/careers/company_profile 
/0,15623,1173,00.html The Scoop: Wachtell, Lipton, 
Rosen & Katz]</ref> It has for some time been the most 
profitable large law firm in the world on a per-partner 
basis according to the "[[American Lawyer]]'s" annual 
[[AmLaw 100 Survey]]. The firm also ranks at the top 
of other various surveys, including the [[Vault.com 
Associates Survey]] and was ranked as the #1 Most 
Prestigious Law Firm to Work For by the 
Avery Index ,<ref> 

[http://www.averyindex.com/2007_best_workjprestigio 
us.php 2007 Law Firm Rankings]</re£> Wachtell is 
generally considered one of the most difficult law firms 
at which to be hired: summer classes at Wachtell 
number in the low dozens and are composed of the 
strongest applicants from top [[law school]]s. Its 
associates are generally paid substantially more than 
associates at any other firm in the country. The firm is 
smaller, and has a lower associate-to-partner ratio, than 
its peer firms, such as [[Cravath, Swaine & Moore]]. 

Line 21: 

*[[Bemard Nussbaum]], partner — Former Counsel to 
the President of the United States under the Clinton 
Administration 
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*[[Chaim Fortgang]], partner & former Head of the 
bankruptcy department - "involved in almost every 
headline bankruptcy of the [1990's] and beyond<re£> 
{{cite web | title=The Sunbeam Boys: In Big 
Bankruptcy Battle It's Chaim Fortgang Vs. Harvey 
Millers| url=http://www.observer.com/node/44042 


+ 


| accessmonthday=April 17 | accessyear=2008 }}</ref> | accessmonthday=April 17 | accessyear=2008 }}</ref> 

*[[Elizabeth Holtzman]], associate — former U.S. *[[Elizabeth Holtzman]], associate — former U.S. 

Representative and Brooklyn District Attorney Representative and Brooklyn District Attorney 


| accessmonthday=April 17 | accessyear=2008 } } 
</refxref>{{cite web j title=Wharton’s Inaugural 
Restructuring Conference | 

nrl=http://clubs. wharton.upenn.edu/wrc/conference/200 
5/WRCC_attendee_guide.pdf |publisher=Wharton’s 
Inaugural Restructuring Conference |page=4_ 


*[[Chaim Fortgang]], partner & former Head of the 
bankruptcy department - "involved in almost every 
headline bankruptcy of the [1990's] and beyond<ref> 

{ {cite web | title=The Sunbeam Boys: In Big 
Bankruptcy Battle It's Chaim Fortgang Vs. Harvey 
Millers| url=http://www.observer.com/node/44042 

:| accessmonthday=April 17 | accessyear=2008 }} 
j</refi>,<ref>{{cite web | title=Wharton’s Inaugural 
•Restructuring Conference | 

|url=http://clubs.wharton.upeim.edu/wrc/conference/200 
:5/WRCC_attendee_guide.pdf |publisher=Wharton’s 
{Inaugural Restructuring Conference [p_age=4 ^ 


Current revision as of 09:13,4 September 2008 

Wachtell, Lipton, Rosen & Katz is a prominent 
law firm located in New York City. Herbert 
Wachtell, Martin Lipton, Leonard Rosen, and 

George Katz founded the firm in 1965It has 
for some time been the most profitable large law 
firm in the world on a per-partner basis according 
to the American Lawyer's annual AmLaw 100 
Survey. The firm also ranks at the top of other 
various surveys, including the Vault.com 
Associates Survey and was ranked as the #1 Most 
Prestigious Law Firm to Work For by the 

Averylndex.^ Wachtell is generally considered 
one of the most difficult law firms at which to be 
hired: summer classes at Wachtell number in the 
low dozens and are composed of the strongest applicants from top law schools. Its associates are 
generally paid substantially more than associates at any other firm in the country. The firm is smaller, 
and has a lower associate-to-partner ratio, than its peer firms, such as Cravath, Swaine & Moore. 

The firm is known for its skill in mergers and acquisitions. One of the founding partners, Martin 
("Marty") Lipton invented the so-called "poison pill defense" during the 1980s to foil hostile takeovers. 
Working both sides of the mergers and acquisitions game, Wachtell Lipton has represented blue-chip 
clients like AT&T, Kraft, and JP Morgan Chase. 

The firm is also known for its skill in business litigation. It has handled many of the precedent-setting 
Delaware corporate governance cases. One of their most recent clients was Larry Silverstein, owner of 
the two 110-story towers of the World Trade Center. Videos of another one of the founding partners, 
Herb Wachtell, arguing cases in the courtroom are shown in law school classes as examples of effective 
trial advocacy. 


Wachtell, Lipton, Rosen & Katz 
Wachtell, Lipton, Rosen & Katz 


Headquarters 
No. of Offices 
No. of Attorneys 
Major Practice Areas 
Revenue 
Date Founded 
Company Type 
Website 


53 New York City 
1 

217 

General practice 
$474 million 
1965 (New York City) 
general partnership 
www.wlrk.com 
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■ 1 Famous alumni 

■ 2 See also 

■ 3 References 

* 4 External links 


Famous alumni 

■ Bernard Nussbaum, partner — Former Counsel to the President of the United States under the 
Clinton Administration 

■ Chaim Fortgang, partner & former Head of the bankruptcy department - "involved in almost every 

headline bankruptcy of the [1990'sl and beyond^ ^ 

■ Elizabeth Holtzman, associate — former U.S. Representative and Brooklyn District Attorney 

■ John Coates, partner — Harvard Law Professor 

■ Jed Rubenfeld, associate — Yale Law Professor 

■ Peter Shuck — Yale Law Professor 

■ Janet Langford Kelly — General Counsel, ConocoPhillips 

■ George Postolos, associate — former President and CEO of Houston Rockets 

■ David Lat, associate — Blogger, Underneath Their Robes and Above the Law 

See also 

■ White shoe firms 

■ The Magic Circle 

References 

1. A The Scoop: Wachtell, Lipton, Rosen & Katz 

2. A 2007 Law Firm Rankings 

3. A "The Sunbeam Boys: In Big Bankruptcy Battle It's Chaim Fortgang Vs. Harvey Millers". Retrieved on 
April 17, 2008. 

4. A "Wharton’s Inaugural Restructuring Conference". Wharton’s Inaugural Restructuring Conference. 
Retrieved on April 17, 2008. 

External links 

■ Official website 

■ LawPeriscope Profile 

■ US Top 50/New York: What Marty says... 

■ WLRK Named Top Law Firm for Prestige, Says New Top 100 Vault Guide; Firm Takes Top 
Ranking in BestSelling Vault Guide for Fourth Straight Year 

■ Profile: Wachtell Lipton Rosen & Katz 

Retrieved from "http://en.wikipedia.org/wikiAVachtell,_Lipton,_Rosen_%26_Katz" 

Categories: Law firms of the United States | Law firms based in New York City | Law firms established 
in 1965 


■ This page was last modified on 4 September 2008, at 09:13. 

* All text is available under the terms of the GNU Free Documentation License. (See Copyrights 
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Please note: the registrant of the domain name is specified 
in the "registrant 1 field. In most cases, GoDaddy.com, Inc. 
is not the registrant of domain names listed in this database. 


Registrant: 

Godaddy Software 

14455 N Hayden Rd 
Suite 219 

Scottsdale, AZ 85260 
United States 

Registered through: GoDaddy.com, Inc. (http://www.godaddy.com) 

Domain Name: WLRKLAW.COM 

Created on: 27-Jun-08 

Expires on: 27-Jun-15 

Last Updated on: 08-Ju!-08 

Administrative Contact: 

domains for sale, Godaddy Software domains4sale@godaddy.com 
Godaddy Software 
14455 N Hayden Rd 
Suite 219 

Scottsdale, AZ 85260 
United States 

480-505-8800 Fax - 480-505-8844 
Technical Contact: 

domains for sale, Godaddy Soflware domains4sale@godaddy.com 
Godaddy Software 
14455 N Hayden Rd 
Suite 219 

Scottsdale, AZ 85260 
United States 

480-505-8800 Fax - 480-505-8844 

Domain servers in listed order: 

NS09.DOMAINCONTROL.COM 
NS10.DOMAINCONTROL.COM 


Registry Status: clientDeieteProhibited 
Registry Status: clientRenewProhibited 
Registry Status: clientTransferProhibited 
Registry Status: clientUpdateProhibited 


Report Invalid Whois 
See Underlying Registry Data 




r\ a s** 
"" v 






106 








Server: br ddcon2. wl rk. com 
Address: 192.7.2.16S 


Non-authoritative answer: 

sullcronnaw.com internet address = 72.167.131.75 
sullcromlaw.com nameserver = ns09.domaincontrol.com 
sullcromlaw.com nameserver = nslO.domaincontrol.com 
sul1cromlaw.com 

primary name server = ns09.domaincontrol.com 
responsible mail addr = dns.jomax.net 
serial = 2008071700 
refresh = 28800 (8 hours) 
retry = 7200 (2 hours) 
expire = 604800 (7 days) 
default TTL = S6400 (1 day) 
sullcromlaw.com MX preference = 10, mail exchanger = 
sullcromlaw.com MX preference = 20. mail exchanger = 
sullcromlaw.com MX preference = 30. mail exchanger = 
sullcromlaw.com MX preference = 40. mail exchanger = 
sullcromlaw.com MX preference = 50. mail exchanger = 


aspmx.1.google.com 
altl.aspmx.1.google.com 
alt2.aspmx.1.google.com 
aspmx2.googlemail.com 
aspmx3.googlemail.com 


ns09.domaincontrol.com internet address 
nslO.domaincontrol.com internet address 
aspmx.1.google.com internet address 
aspmx.1.google.com internet address 

altl.aspmx.l.google.com internet address 
altl.aspmx.1.google.com internet address 
alt2.aspmx.1.google.com internet address 
aspmx2.googlemail.com internet address 
aspmx3.googlemail.com internet address 
>|greenbergtraurigI aw.cortfl 
Server T"”b r d d co n2 TwtV kTco m 
Address: 192.7.2.16S 


64.202.165.114 
208.109.255.5 

66.249.83.114 

66.249.83.27 

64.233.183.114 

64.233.183.27 

72.14.253.27 

209.85.135.27 

64.233.167.27 


* 


Non-authoritative answer: 

greenbergtrauriglaw.com internet address = 68.178.232.100 
greenbergtrauriglaw.com nameserver = ns51.domaincontrol.com 
greenbergtrauriglaw.com nameserver = ns52.domaincontrol.com 
greenbergtrauriglaw. com 

primary name server = ns51.domaincontrol.com 

responsible mail addr = dns.jomax.net 

serial = 2008062100 

refresh = 28800 (8 hours) 

retry = 7200 (2 hours) 

expire = 604800 (7 days) 

default TTL = 86400 (1 day) 

greenbergtrauriglaw.com MX preference = 10. mail exchanger = 
greenbergtrauriglaw.com MX preference = 20. mail exchanger = 
greenbergtrauriglaw.com MX preference = 30. mail exchanger = 
greenbergtrauriglaw.com MX preference = 40. mail exchanger = 
greenbergtrauriglaw.com MX preference = 50. mail exchanger = 


aspmx.1.google.com 
altl.aspmx.1.google.com 
alt2.aspmx.1.google.com 
aspmx2.googlemai1.com 
aspmx3.googlemai1.com 


ns51.domaincontrol.com internet address = 208.109.14.47 ^ 

ns52.domaincontrol.com internet address = 208.109.255.26‘^J' 

aspmx2.googlemail.com internet address = 209.85.135.27 

aspmx3■googlem ai1.com internet address = 64.233.167.27 

> Lwlrklaw.c ortiJ 

Server: brddcon2.wlrk.com 

Address: 192.7.2.168 


Non-authoritative answer: 

wlrklaw.com nameserver - nsl.suspended-for.spam-and-abuse.com 

wlrklaw.com nameserver = ns2.suspended-for.spam-and-abuse.com 

nsl.suspended-for.spam-and-abuse.com internet address = 64.202.167.73 
ns2.suspended-for.spam-and-abuse.com internet address = 64.202.167.74 

> _ 



Carlo Mauro • Chief Technologist 

Wachtell, Lipton, Rosen & Katz 

51 West 52nd Street • New York, NY 10019 

(212) 403-1540 (Direct Phone) • (212) 403-4540 (Direct Fax) 
cmauro@WLRK.com • www.wirk.com • vCard 
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U.S. Department of Justice 



Federal Bureau of Investigation 


In Reply, Please Refer to 
File No. 


26 Federal Plaza 
New York, NY 10278 

August 19, 2008 


Google 


1600 Amphitheatre Parkway, Building #47 
Mountain View, CA 94043 


via facsimile: 


b6 

b7C 


RE: sullcrom@gmail.com 


Dear 


Pursuant to Title 18, United States Code, Section 
2703(f), you are directed to preserve all records and information 
in Google's possession including, but not limited to, accounts, 
logs, files, communications, email messages, programs, client 
account records and any other documents pertaining to the email 
address: sullcrom@gmail.com. 

This request is made in anticipation of an appropriate 
judicial order requiring the production of all information 
(including content) pursuant to the Electronic Communication 
Transactional Records Act, 18 U.S.C §§ 2701, et. seq. Pursuant 
to Section 2703 (f), you are required to preserve these items for 
a period of ninety days. This period is subject to renewal. 

Please be advised that your failure to comply with this 
request may subject you to criminal penalties. As this request 
is made pursuant to an ongoing criminal investigation, you are 
requested not to disclose this request to anyone. If you have 
any questions or need additional information, pleas e contact 
Special Agent I I 


Sincerely, 


David A. Cardona 
Special Agent In Charge 



b6 

b7C 


Supervisory Special Agent 

















U.S. Department of Justice 


Federal Bureau of Investigation 


In Reply, Please Refer to 26 Federal Plaza 

FileNo - New York, NY 10278 

August 19, 2008 

Yahoo 1 Inc. 

701 First Ave, Bldg. D 
Sunnyvale, CA 94089 


via facsimile: 


RE: sul1crom@yahoo.com 


b6 

b7C 


Pursuant to Title 18, United States Code, Section 
2703(f), you are directed to preserve all records and information 
in Google's possession including, but not limited to, accounts, 
logs, files, communications, email messages, programs, client 
account records and any other documents pertaining to the email 
address: sullcrom@yahoo.com. 

This request is made in anticipation of an appropriate 
judicial order requiring the production of all information 
(including content) pursuant to the Electronic Communication 
Transactional Records Act, 18 U.S.C §§ 2701, et. seq. Pursuant 
to Section 2703 (f), you are required to preserve these items for 
a period of ninety days. This period is subject to renewal. 

Please be advised that your failure to comply with this 
request may subject you to criminal penalties. As this request 
is made pursuant to an ongoing criminal investigation, you are 
requested not to disclose this request to anyone. If you have 
any questions or need additional information, plea se contact 
Special Agent I I 


Sincerely, 


David A. Cardona 
Special Agep£ In Charge 
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b7C 


Supervisory Special Agent 
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FEDERAL BUREAU OF INVESTIGATION 


Precedence: ROUTINE Date: 08/20/2008 

To: New York Attn: C-37 

From: New York 



Case ID #: 288A-NY-300570 (Pending) 


Title: UNSUB(s) 

Sullivan & Cromwell LLP; 
Wachtell, Lipton, Rosen & Katz; 
Greenberg Traurig, LLC - Victims 
CIP 
00: NY 


Synopsis: Claim Statistical Accomplishment 


^sent out a 


Details: On August 20, 2008, SA.__ 

2703 (f) letter to Google, 1600 Amphitheater Parkway, Mountain 
View, CA, 94043, and to Yahool, Inc., 701 First Avenue #D, 
Sunnyvale, CA, 94089. 







To: 

Re: 


New York Frc^: 
288A-NY-300570, 


New York 
08/20/2008 



Accomplishment Information: 
Number: 2 

Type: CIP 2703(f) ORDER SERVED 

ITU: CIP 

Claimed By:_ 

SSN: f ” 

Name: _ 

Squad: C37 


b6 

b7C 


2 


















% 


To: New York From: New York 

Re: 288A-NY-300570, 08/20/2008 


LEAD(s): 

Set Lead 1: (Info) 

NEW YORK 

AT NEW YORK, NEW YORK 
Read and clear. 

♦♦ 
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FEDERAL BUREAU OF INVESTIGATION 


Precedence: ROUTINE Date: 9/08/2008 

To: New York 


From: New York 



Case ID #: 288A-NY-300570 (Pending) 

188B-NY-294567-C (Pending) .— J 

Title: VICTIM NOTIFICATION FORM 


Synopsis: Computer Intrusion 

Reference: 288A-NY-300570 Serial 1 

Details: 

VnsCase#: 288A-NY-300570 
CAgtName: | | 

PContact: Business 
BusName : Sullivan & Cromwell LLP 
BusEIN : 

BusAcct : 

VicFirN : 

VicMidN : 

VicLastN: 

SSAN : 

VicDate : 

VicDOD : 

VicMinor: 

DOB : 

Race : 

Sex : 

Addr : 

Addr2 : 

City : 

State : 

Country : 

Zip : 

Email : 

HPhone : 

Fax : 







To: New York From: New York 
Re: 288A-NY-300570, 9/08/2008 


VWrkAddr 

VWrkadd2 

VWrkCity 

VWrkSt 

VWrkCtry 

VWrkZip 

WEmail 

WPhone 

WFax 

VicPager 

NOKFirN 

NOKMidN 

NOKLastN 

NOKRel 

NOKAddr 

NOKAddr2 

NOKCity 

NOKState 

NOKCtry 

NOKZip 

NOKHEmal 

NOKWEmal 

NOKHPho 

NOKWPho 

NOKHFax 

NOKWFax 

NOKPager 

GrdFirN 

GrdMidN 

GrdLastN 

GrdRel 

GrdAddr 

GrdAddr2 

GrdCity 

GrdState 

GrdCtry 

GrdZip 

GrdHEmal 

GrdWEmal 

GrdHPho 

GrdWPho 

GrdHFax 

GrdWFax 

GrdPager 

PropRet 

TotLoss 

Lang. 

Disable 


125 Broad Street 

New York 

NY 

US 

10004-2498 

2125584000 


N 

000000000 


2 
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FD-302 (Rev. 10-6-95) 


FEDERAL BUREAU OF INVESTIGATION 


Date of transcription 08/25/2008 


I I of SULLIVAN. AND, 

CROMWET iT i. LLP law "firm."” 125~B(£oa’d' Street, New" YorlT, New ~York", 

10004-249 8 , ^business teleph.©ne_ number |_ | and _ \. 

I I ’ ~P a” rtner ~at SULLIJ^ N AND CROMWELL, LLP (S&C) ,. business _ 

pho ne numb er l_ _ . „ ~ l ~were interviewed at the Assistant 

Uni"ted'~s'tates Attorney 1 ^office in the Southern District of New 
York, 1 Sai nt Andrew's i Plaza, New York, New York, 10007. Also y 
present was | \ Computer Scientist with the FBI. After 

bei ng advised of the identity of the interviewing Agents, 1 ^ 

and I I provided*' the following information: 

On July 17, 2008, an E- Mail was se nt to 
I a partner at S&C, from | a part ner at WACHTELL, 

LIPTON, ROSEN, AND KATZ (WLRK) law firm. I 1 forwarded the E- 

Mail to I I and explained that he found the E-Mail suspicious 

because the return E-Mail address had a domain name of 
"wlrklaw.com." The correct domain name for WLRK is "wlrk.com." 

I 1 subsequently did a sear ch of the S&C computer gateways and 

found that three S&C partners, I I 

I I received the same or a similar E-Mail from the same 

source. 

On July 24, 2008, an E-Mail was sent to I 1 

an Account Executive at HUBBARD ONE, a firm that assists S&C with 
maintaining its website, asking for all the existing files for the 
www.sullcrom.com w ebsite in a co mpressed folder (.zip format). The 
E-Mail was signed ' | 1 Sullivan & Cromwell." The writer 

of the E-Mail stated that he was the new IT Department Team Leader 
and that S&C was thinking about moving to a new website. 

I I fir st came to know about the computer intrusion on 

August 6, 2008, when _ of 

WLRK, called him and advised that the S&C entry on 

www.wikioedia.com (WIKI) had been changed on July 26, 2008, to 

reflect incorrect information about the firm. Specifically, the 

link to the S&C website found at the end of the WIKI entry was _ 

changed from www.sullcrom.com to www. sullcromlaw. com . When 
clicked the www.sullcromlaw.com link found in the WIKI entry, the 
web page www.sullcromlaw.com opened and. resembled the legitimate 
S&C website. However, the contact E-Mail addresses for some 700 
lawyers had been changed. Between July 26, 2008 and August 14, 


investigation on 8/19/2008 at New York, New York 


File# 2 88A-NY-3 00570 
SA 

by SA _ 


Date dictated 


This document contains neither recommendations nor conclusions of the FBI. It is the property of the FBI and is loaned to your agency; 
it and its contents are not to be distributed outside your agency. 
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288A-NY-300570 


Continuation of FD-302 of 


8/19/2008 


2008, | had to change the link in WIKI multiple t arries be cause 

someone kept changing it back to www.sullcromlaw.com. 
informed | I that the WIKI entries were changed for WKLR, S&C, 

the law firm GREENBERG TRAURIG (GT), and that the changes were made 
by a user with the same IP address. 

I 1 discovered that www.sullcromlaw.com was being 

hosted through www.godaddy.com (G0DADDY). On August 8, 2008, S&C 
sent G0DADDY a copyright infringement claim in order to shut down 
www.sullcromlaw.com. GODADDY subsequently removed the 

www.sullcromlaw.com website from its servers. Additionally, _ 

attempted to have sullcrom@google.com removed by contacting GOOGLE. 

On August 13, 2008’, _ notified _ 

that although www.sullcromlaw.com was registered with GODADDY, 
GOOGLE APS was used for E-Mail. 


advised that the S&C, WLRK, and GT law firms all 
handle large corporate mergers and acquisitions. Sometimes large 
companies communicate with S&C person nel via E-Mail to discuss 
future merger and acquisition plans. | | thinks that someone 

may be trying to phish the legitimate S&C website, intercept E-Mail 
messages, and possibly obtain insider information. | |stated 

that no blackmailing attempts or personal threats have been 
directed towards any S&C personnel. 

When asked if I 1 is aware of any disgruntled current 

or former employees, or any employees w ho have be en recently 
terminated, he stated that he did not. I I stated that I I 
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FEDERAL BUREAU OF INVESTIGATION 


Date of transcription 


09/17/2008 


LXR Luxury Resorts' and Hotels, 475 Seagate 


2 ate 

I 

I cellular telephone number |___| was interviewed. 


tel'ephbnlcaliyAf ter bein g advised of the identity of the 
interviewing Agent, I "M provided the following information: 


Internet Protocol (IP) addresses 65.24j4*?l46.210 and 
65.244.146.212 are assigned to The _Naa L.es Granb^B each Resort, 
Naples, Flori da. 65.244.146.210 is a privatfe IP address used as an 
internal gateway to the internet. 65.24,4^146.212 is a public 
address that was assigned to a particular user at a particular 
time. When resort guests wish to connect to the internet from 
their personal computers, they log on to the resort's internet 
access page, fill out an online form with information such as their 
name and room number, select a billing method, and pay for internet 
access. Internet access for a 24 hour period can be purchased for 
$10.95. Guests may choose to purchase internet acces s for a l onger 
time period and are subsequently billed accordingly. I ~| has 

access to logs that record the IP and internet traffic within the 
Naples Grand Beach Resort computer system and can see what resort 
guests utilized those IP addresses. 

| ~1 stated that at approximately 3:36 P.M. on August 

9, 2008, a resort guest utilizing IP address 65.244.146.210 paid 
$10.95 for 24 hour interne t access. On the online form, the guest 
used the name | and room number 12 05. 

I ~1 stated that at approximately 3:52 P.M. on August 

9, 2008, a resort guest utilizing IP address 65.244.146.212 paid 
$10.95 for 24 hour internet acce ss. On the online form, the guest 
used the name I ~~I and room number 1205. 


I l added that acc ording to the logs, it appeared 

that on both occasions, | | billed the $10.95 to room number 

1205 . 


investigation on 09/15/2008 at New York, New York _ (telephonically) 
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288A-NY-300570 
PB: pb 


1 


On September 17. 
Special Agent 


Motor Vehicles driver's license photo for [ 
Florida driver's license number C 


2008, Federal Bureau of Investigation 
Jrequested a Florida Departme nt of 


provided a copy of the photo via E-Mail. 


J 


] 
















288A-NY-300570 
PB :pb 


1 


On September 22„ 2008, Federal Bureau of Investigation 
Special Agent I I requested a Florida Depart ment of 

Motor Vehicles driver's license photo for I ~1 

Florida driver's license number | | 

I provided a copy of the photo via E-Mail. 






Automated Serial Permanent Charge-Out 
FD-5a (1-5-94) 


Date: 09/29/08 Time: 08:12 


Case ID: 288A-NY-300570 Serial: 11 

Description of Document: 

Type : FD302 
Date : 09/24/08 

To : NEW YORK _ 

From : | I _ 

Topic: INTERVIWE OF | 

Reason for Permanent Charge-Out: 

Case Agent is going to revise document 


Employee: 


b6 

b7C 


ypiflU 

- S&o&yo MudM /! 
















*■ -s 


FD-302 (Rev. 10-6-95) 


FEDERAL BUREAU OF INVESTIGATION 


Date of transcription 09/24/2008 


I _ _ _ _ \ GREENBERG 

TRAURIG, LLP (GT) , 1750 Tysons Boule*cird. Suite 1200. McLean. 
Virginia. 22102. business telephon/number I T cellular 

telephone number I „,, I ' was interviewed at the New York 

field office of the FBI, 26 Fec /ral Plaza Drive . Mpw York. New 

York, 10278. Also present was __ with 

the FBI. After being advised of the identity of'the interviewing 
Agents, I I provided the following information: 

On June 25, 2008, I I learned that _ a 

shareholder of GT, received a phone call from a representative of 
Google concerning the purchasing of a premium support service in 
the amount o f $25,000. I I then contac ted Google representative 

l phone number I \ wh o inf ormed him that a 

person by tne name of | [contacted I I to set/ up about 4 0 

E-Mail addresses with a domain name of GREENBERGTRAURL GLAW^COM. 

~| explained to I I tnat he was a summer clerk with GT and 
that GT was setting up n ew web pa ges and needed new yE-Mail 
accounts. Additionally, I \ requested Goo gle move the acco unt 

to premium support for the amount of $25,000. I ~~1 provided 

with a credit card number for the purchase. The credit carh_ 

payment did not go through. At that time, Google contacted l 


|_| then found the website WWW.GREENBERGTRAURIGLAW.COM, 

and noticed that it was a lmost i denticaltoGT T slegitimate^ 
website, GTLAW.COM. When I 1 utilized the search function of 

GREENBERGTRAURIGLAW.COM to locate GT lawyers, he saw that their 
contact E-Mail addresses had changed to the GREENBERGTRAURIGLAW.COM 
domain. 


I | advised that GT neve r had a summer intern or 
employee named | \ I l did a Google sear ch and Ion ; 

a posting on a Korean discussion board from user name __ 

requesting help with setting up websites. On June 27, 2008, _ 

located a Google Apps discussion posting from MORGERA^ GMAIL^COM, 
The poster stated that his/her domain's account 

(GREENBERGTRAURIGLAW.COM) was disabled, and that he/she was the 
administrator. 




, 2008, 

_1 


5MAIL.COM. 


Investigation on 09/24/2008 at New York, New York 
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, On ' '_, Page 


On or about June 27, 2008, I I 

from Chicago who does computer forensic work for GT 
GREENBERGTRAURIGLAW.COM shut down. 


a GT shareholder 
, had the 
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FEDERAL BUREAU OF INVESTIGATION 


Date of transcription 09/22/2008 


1 


WACHTELL, 

LIPTON, ROSEN & KATZ ("WLRK") law firm, 51 We st 52nd Street , New 

was 


York, New York, 10019-6150, telephone number 
inte rviewed at his place of employment. Also present from WLRK 


were 


T 


I 


1 


from the Federal Bureau of Investigation was |_ 
Scientist 
Agents 


Als o present 
3 Computer 




information: 


ter being advised of the identity of the interviewing 
and the other WLRK employees provided the following 


On or about June 28, 2008, an anonymous user made changes 
to the WIKIPEDIA.COM entry for WLRK. The same user IP address also 
made changes to the WIKIPEDIA.COM entries for SULLIVAN AND 
CROMWELL, LLP ("S&C"), and GREENBERG TRAURIG, LLP. The most 
notable changes were the changing of the hyperlinks to the law 
firms' websites. The links were changed to reflect incorrect 
domains. 


[ 


stated that on June 30, 2008, 


last name 


unknown, a reoresentative of HOSTLYON.OOM contacted 


at WLR K, to pay for the 

registration of t he WLRK LAW.COM domain. | ~| passed the 

information on to I I who found this strange because WLRK hosts 

their domain internally. WLRK's domain is WLRK.COM and not 
WLRKLAW.COM. According to I L the person who tried to register 



On July 01, 2008, I I contacted WLRK manage ment an d 
made them aware that someone phished the WLRK website. I I also 

discovered that GODADDY.COM was hosting WLRKLAW.COM. The 
WLRKLAW.COM website was identical to the legitimate WLRK website. 
However, the WLRKLAW.COM website's "lawyer search" function didn't 
work correctly. It was discovered that a JOTFORM.COM form was used 
as the code for the WLRKLAW.COM search function. 
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b6 
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b6 
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investigation on 09/09/2008 at New York, New York 
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WLRK next programmed code into their website that popped 
up an error message when users were linked to WLRK.COM from 
WLRKLAW.COM. The purpose of the error message was to inform users 
that they were directed to WLRK.COM from WLRKLAW.COM, and that 
WLRKLAW.COM was in no way affiliated with WLRK. 

1 I filed a copyright claim with GODADDY.COM alleging 

that the WLRKLAW.COM copied the WLRK.COM website. GODADDY.COM 
responded by suspending the WLRKLAW.COM domain until the copyright 
claim had been settled. 

On July 02, 2008, I I entered the E-M ail add ress 

M0RGERAE@GMAIL.C0M into a G00GLE.C0M sea rch bar. I I located two 

postings on Internet newsgroups from the j COM E-Mail 

address. The postings were seeking assistance in setti ng up 
enterpri se E-Mail systems. One posting listed the name \ \ 

_ as the contact person. 

On July 03, 2008, NETWORK SOLUTIONS notified I I that 

someone had filed a copyright .claim against WLRK alleging that the 
WLRK.COM website had copied the WLRKLAW.COM website. 

_received an E -Mail to his personal E-Mail address 

from someon e purporting to be I ~l 

I 1 from E-Mail address ARWOLF@WLRKLAW.COM. The E-Mail 

acknowledged the error message WLRK coded into the WLRK.COM 
website. Additionally, the E-Mail stated that the person filed a 
copyright complaint with NETWORK SOLUTIONS, alleging that WLRK 
copied the WLRK LAW.COM w ebsite. The E-Mail also adv ised I I that 
the person knew | | IP address, and referred to | as a 

"fag". 

I I purchased about 150 variations of the WLRK domain 

from NETWORK SOLUTIONS, which cost WLRK about $18,000. On July 09, 
2008, I I attempted to purchase WLRKLAW.COM from GODADDY.COM, but 

G0DADDY.COM would not release the WLRKLAW.COM domain because the 
domain was still under investigation. The "whois" information for 
WLRKLAW.COM on GODADDY.COM listed WLRK as the owner of the 
WLRKLAW.COM domain . Because WLRK was not affiliated with 

WLRKLAW.COM, _ wanted GODADDY.COM to remove WLRK's name and 

contact information from t he "whois". G0DADDY.COM wanted many 
forms of proof that | | was acting on WLRK's behalf before 

changing the "whois" information. GODADDY.COM finally suspended 
the "whois" information on July 18, 2008. 
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__, Page_ 


O n July 18, 2008, f 
E-Mail from[7~ 


l WLRK Partner, received an 
I Partner at S&C. The E-Mail was in 


1 received from someone 


became su spiciou s a nd forw arded 


response to an E -Mail that I 

purporting to be _ 

I |E- Mail, ultimately reaching [ 

point, | l realized that although the WLRKLAW.COM domain had been 

suspended, there was still a problem with GOOGLE APS and the E-Mail 
handling. 


] and 


]. At this 


On August 6, 2008, C 


] contacted 


I ~ _| at S&C, and notified him 'that S&C mignt Pe a 

victim of the same attacks that WLRK was a victim of. 


WLRK does not know who might be behind the attacks or 
what might be a possible motive. 


b6 

b7C 


b6 

b7C 
















FD-302 (Rev. 10-6-95) 



- 1 - 

FEDERAL BUREAU OF INVESTIGATION 


Date of transcription 11 /13 /2008 


] 


FIDELITY 
1601 Sawora ss Corporate Pa rkway. 

_] was 


NATIONAL INFORMATION SERVICES, _ ___ 

Suite 13 0, Sunrise, Florida, phone number [_ 
interviewed telephonically. After being advised of the identity of 

the interviewing Agent and the purpose of the interview, _ 

provided the following information: 

Card Number 4793 4702 2372 2602 is a prepaid gift card 
("GC") that was purchased from the Town Center At Boca Raton mall, 
Boca Raton, Florida, on June 3, 2008, at 15:18 P.M. Eastern 
Standard Time ("EST"). The GC had an original value of $100.00. 

The GC was purchased with a VISA-logo debit card, number 


issuing bank Sun Trust Bank. On June 21, 2008, at 1:30 
the GC was used to make a GoDaddy.com purchase. On June 


P.M. EST, 

27, 2008, the GC was used to make another GoDaddy.com purchase in 
the amount of $29.00 


investigation on 11/13/2008 at New York, New York _ 

File# 288A-NY-3 00570 Date dictated 

f>y SA_ 


b6 

b7C 


This document contains neither recommendations nor conclusions of the FBI. It is the property of the FBI and is loaned to your agency; 
it and its contents are not to be distributed outside your agency. 
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FEDERAL BUREAU OF INVESTIGATION 


Precedence: ROUTINE 


Date: 12/17/2008 


To: Miami 


Attn: SSA I __|_ 

Squad C-5, | ~~| 


From: New York 

C-37 

Contact: 


Approved By: 
Drafted By: 


y/ 


Case ID #: 288A-NY-300570 (Pending) 

Title: UNSUB(S); 

SULLIVAN & CROMWELL, LLP; 
WACHTELL, LIPTON, ROSEN, & KATZ; 
GREENBERG TRAURIG, LLC - VICTIMS 
COMPUTER INTRUSION 
00: NY 


Synopsis: To request Miami conduct an interview of |_| 

_ who are believed to reside at 

_Florida, 33067-3925. 


Enclosure(s) : Enclosed for Miami is: One (1) Analyst's Notebook 
link chart depicting in graphical for m results of invest igation, 
one (1) i^bte of Florida DMV phot o of 
(1) State of Florida DMV photo of 


1 and 


one 


Details: Sullivan & Cromwell LLP ("S&C"), Wachtell, Lipton, 

Rosen, & Katz ("WLRK"), Greenberg Traurig, LLC ("GT"), and 
Cravath, Swaine, & Moore LLP ("CSM"), are major law firms in New 
York City. The law firms specialize in Corporate Mergers and 
Acquisitions and are ranked the four most prestigious law firms 
in the United States, according to WWW.VAULT.COM. From June 2008 
through July 2008, the four law firms' hyperlink addresses in 
their respective WWW.WIKIPEDIA.ORG ("WIKI") pages were altered. 
WIKI is a free, online encyclopedia, whose content can be edited 
by anyone accessing the WIKI website. The law firms all have 
WIKI entries. The entries contain various information about the 
law firms, including a hyperlink which directs the user to the 
law firm's website. When clicked, the hyperlinks are supposed to 
redirect the user to the law firms' legitimate websites. The 
altered links were disguised to resemble the legitimate law 
firms' websites, but redirected the user to a spoofed version of 
the law firms' websites. 














To: 

Re: 


Miami From: New York 
288A-NY-300570, '12/17/2008 


The legitimate websites for S&C, WLRK, GT, and CSM are 
WWW.SULLCROM.COM, WWW.WLRK.COM, WWW.GTLAW.COM, and 
WWW.CRAVATH.COM, respectively. The spoofed websites had domain 
names of WWW.SULLCROMLAW.COM, WWW.WLRKLAW.COM, 

WWW.GREENBERGTRAURIGLAW.COM, and WWW.CRAVATHLAW.COM. 

New York's investigation has revealed that the 
person(s) responsible for making the WIKI page changes did so 
from IP addresses owned by Comcast Communications. The spoofed 
websites were registered with WWW.G0DADDY.COM from IP addresses 
also owned by Comcast. Records obtained t hrough subpoenas 
indicate the IP addresses were assigned to 

6890 NW 75th Court, Pa rkland, Florida, 33067-3925, telephone 
number I [ 


The spoofed websites were hosted by WWW.GODADDY.COM and 
were purchased with prepaid gift cards that were obtained from 
the Boca Raton Town Center Mall in Boca Raton, Florida. The 
contact E-Mail address provided to WWW.G0DADDY.COM for the 
WWW.SULLCR0MLAW.COM domain was SULLCR0M@GMAIL.C0M, for the 
WWW.WLRKLAW.COM domain, WLRKLAW@GMAIL.COM, for the 
WWW.CRAVATHLAW.COM domain, CRAVATHLAW@GMAIL.COM, and for the 
WWW.GREENBERGTRAURIGLAW.COM domain, TP0SETP0SE@YAH00.C0M. 
SULLCR0M@GMAIL.C0M and CRAVATHLAW@GMAIL.COM were both registered 
from IP addresses that are owned by Comcast and assigned to 

I SULLCR0M@GMAIL.C0M was also accessed from an 
IP address owned b y Florida Atlantic University and assigned to 


On June 25, 2008, GT received a "follow-up" phone call 
from a representative of WWW.G00GLE.COM ("GOOGLE") concerning the 
purchase of a premium support service in the amount of $25,000. 
Th e GOOGLE repre sentative informed GT that a person by the name 
of |contacted GOOGLE to set up about 40 E-Mail 

addresses wit h a domain name of WWW.GREENBERGTRAURIGLAW.COM. 

explained to the GOOGLE representative that he was a 


summer clerk with GT, and that GT was setting up new web pages 
and needed new E-Mail accounts. The GOOGLE representative's 
reason for the "follow-up" call to GT was bec ause there wa s some 
problem with the credit card information that I I 

provided to GOOGLE to pay for the premium support service. -GT 
advised writer that GT has never had a summer intern or employee 
named | | . 


GT conducted a GOOGLE 
Korean discussion board from user name 
with setting up websites. GT also located a GOOGLE Apps 
discussion posting from a user with E-Mail address 


search and locate d a posting on a 

I requesting help 
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To: Miami From: New York 

Re: 288A-NY-300570, 12/17/2008 


I I The poster stated that his/her domain's 

account, WWW.GREENBERGTRAURIGLAW.COM, was disabled, and that 
he/she was the administrator. The poster was complaining to 
GOOGLE Apps about the account interruption. Records obtained 
through subpoenas indicate that I l is registered 

to the I I Comcast Communications account. 

Florida Atlantic University ("FAU"), 777 Glades Road, 
Boca Raton, Florida, 33431, telephone number (561) 297-1054 , 

advised that P I _ 

| his research 

interests include IP-QoS Network Architectures, Wireless 
Networks, and Information Theory and Coding. 

Public records searches as recent as 12/2008 yielde d 
the following biographical information for 


Name: 

Sex: 

DOB: 

SSN: 

Address: 

Height: 

Public records sea rches yielded the follow ing 
biographical information fori t 


Name: 
Sex: 

DOB: 

SSN: 

Address: 


Height: 5'10" 


_ New York requests Miami c onduct interviews of [_ 

__ and conduct logical 

investigation to determine the individual responsible for 
captioned acts. 
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To: 
Re : 


Miami From: New York 
288A-NY-300570, 12/17/2008 


LEAD(s): 

Set Lead Is (Action) 

MIAMI 


AT MIAMI. FLORIDA 


New York reque sts Miami _ponduct interviews of 

and conduct logical 


investigation to de termine the individual responsible for 
captioned acts. Thel 


I a TVtr r-rn q p t- j c /-• ^ t-i feg 


directed to SA 





2Mk 


SEARCHED_ 

SERIALIZED 


MAR 2 3 2009 





.4 


FLs-302 (Rev. 10-6-95) 


FEDERAL BUREAU bF INVESTIGATION 


Date of transcription 03/05/2009 


Florida, date of^birth 


Professor] 


and Leifert, 
Florida (FL> 
attorney, Y_ 


being advised of the ide ntit 

nature of the interview, _ 

information: 


I e-mail address 

ZT was interviewed at the Law Offices of Leifert 
00 South Pine Island Road, Suite 220, Planta tion, 
Also present at the interview was I I 

l After 

f the ide ntity of the interviewing Agents and the 
nterview, _ provided the following 


0 ^ 


I I has been at FA U for 

)erforms adminis trative duties . I 
I date of birth I 


_land mostly 

lives with his wife, 

_ce llu Xax telephone numb er 

I. dafo n,-F -birth_ 


^____|, Boca Raton, FL. 

[ stated that I Idoes n oft go out and does not have friends 
over.>^ |__ I mentioned I 

I ~l stated that no one in his family 

has been involved in any civil matters in the past year. 


I_| uses a laptop prov ided to h im by FAU for work and 

sometimes uses it for personal use. I ~| has a desktop in his 

office but rarely use s it. At home I I has a desktop computer 

and both h is wife and l have their own personal laptops. 

home is equipped with wireless internet and he believes 
the Wire less router has encryption setup on it but is not sure. 

I ~1 acknowledged that his Internet Service Provider (ISP) is 

COMCAST. | T stated his technical expertise when it comes to 

computers and the internet is minimal. I ~| stated his 

knowledge is more in "theory" than it is "hands on". FAU also ✓ 
provides I ~l with an APPLE IPHONE 3G, cellular phone, which f 

uses for both work and personal business. His wife also owns an W 
APPLE IPHONE . I I occasiona lly us es the internet feature on Of 

his IPHONE. | | stated that I I does not have a cellular v 

phone. 


lcr?s Jfooa.'so'a 


investigation on 03/05/2009 at Plantation, Florida 


File# 288A-NY-300570 
SA 
by SA 


Date dictated 03/05/2009 


This document contains neither recommendations nor conclusions of the FBI. It is the property of the FBI and is loaned to your agency: 
it and its contents are not to be distributed outside your agency. i ( t-v-K r— i\ l {—1 
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FD-302a (Rev. 10-6-95) 


288A-NY-3 0057 0 


Continuation of FD-302 of 


> On 03 / 05/2009 , Page 


has a perso nal websi te that was created for him 
by FAU and is hosted by FAU. I ~l stated he does not have any 

other websites or does he have the knowledge to create a website . 
Writer askedI I about personal e-mail accounts but 

advised I 
accounts. 


] not to answer any questions about personal e-mail 


to see f 


[ 


^stated 


_ uses an application on his laptop th at all ows him 

comput er screen and monitor the websites | |visits , 

is aware of the monitoring software. 


explained that 


I 


] 


sometimes to purchase clothing 
was shopping online, 
allowance of a minima 


luses the int ernet mos tly for homework and 

~1 wou ld be present when | | 

indicated that I I receives an 


amount and occ asion ally receives a gift card 
estimated that I I receives approxim ately 
three (3) gift cards of twenty-five dollars a year. f I 


for the mall. 


mentioned 


_ does not have a credit card. I 1 banks at BANK 

OF AMERICA and has a business credit card from FAU. I 1 did 

not recall what bank FAU uses. 


i _ i has not traveled for work muc h in the past couple 

of years due to budget issues at FAU. I ~l occasion ally travels 

to ORLANDO and the BAHAMAS with his family. I I last visit 

to the BAHAMAS was in June of 2008. I I admitted he did travel 

to Na ples, Flo rida in August of 2008. D espite th is bein g a work 
trip, I ~1 took his fmaily with him. I ~l advisedH 


not to answer any other questions regarding the Naples trip. 


[ 


] has used WIKIPEDIA, a f ree onlin e encyclopedia 


] has never visited 


that users can freely edit, on occasion, 
or heard of S ULLCROM.C OM, WRLK.COM, GREENBERGTRAURIG.COM or 
CRAVATH.COM. | I stated he has never checked the email 

SULLCROMOGMAIL.COM. 


SA 


for consent to search his laptop. 


adv ised H 
SA 


] reminded 


]not to give, the FBI consent to search the 
that his laptop was owned by 


laptop. _ _ 

FAU and tha t the FBI might ask FA U for consent to search the 
laptop. SA ^ 
contents of the laptop, 


Jnot to alter or destroy the 


interviewing[ 


Writer stated to [ 


[ 


] that the FBI is interested in 


_ ._ ~\ stated that he would like to speak with 

I 1 before the FBI interviewed him. I ~1 indica ted he would 


contact writer about a possible interview with 
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j (Rev. 05-01-2008) 


UNCLASSIFIED 


FEDERAL BUREAU OF INVESTIGATION 


Precedence: ROUTINE 


Date: 03/10/2009 


To: New York 


Attn: Sq uad C-37 

SA I 


From: Miami 

C-5 

Contact : SA 


Approved By: | 1 

Drafted By: | 1 j(f^ 

Case ID #: 288A-NY-300570 (Pending )"/3 

Title: UNSUB(s); 

SULLIVAN & CROMWELL, LLP; 

WACHTELL, LIPTON, ROSEN, & KATZ; 

GREENBERG TAURIG, LLC - VICTIMS 
COMPUTER INTRUSIONS 
00: NY 

Synopsis: To forward results of investigation pertaining to 

captioned matter and to cover lead. 

Reference: 288A-NY-300570 Serial 16 


Enclosure(s) : Fo r New York are the following: 

1. Interview with I I (FD-302) . 

2. 1A envelope containing written notes of the _ interview. 

Details: On 03/02/2009, Spe cial Agent (SA) f 1 was 

telephonically co ntacted b y | Writer scheduled 

an interview with | | for 03/05/2009. On 03/03/2009, writer 

was contacted by | attorney, who stated he 

would like the FBI to sneak witn i l at his office. On 

03/05/2009, SA | . | and S AI I met with 

| | and his attorney ~| ~ 

As requested in the referenced lead, I I 

was questioned about his involvement in the spoofing of the 
websites WWW.SULLCROM.COM, WWW.WLRK.COM, WWW.GTLAW.COM and 
WWW.CRAVATH.COM. Details are included in the enclosed FD-302. 
Morgera was notified that the FBI was interested in interviewing 



UNCLASSIFIED 



















UNCLASSIFIED 


To: New York From: Miami 

Re: 2 8 8A-NY-30057 0, 03/10/2009 


his son, |_ 


] explained that he had not 


interviewed [ 


nterviewed him. S' 


possible meeting with . _, 

contacted writer via e-mail and stated[ 


1 and would like to do so before the FBI 
1 stated he would contact writer about a 
O n 03/10/2009, T 


was not m 


the position to give an interview. 

Based on the above, Miami considers this lead covered. 


UNCLASSIFIED 










UNCLASSIFIED 


To: New York From: Miami 

Re: 288A-NY-3 0057 0, 03/10/2009 


LEAD(s): 

Set Lead 1: (Info) 

NEW YORK 

AT NEW YORK, NEW YORK 
Read and clear. 


♦♦ 


UNCLASSIFIED 












FEDERAL BUREAU OF INVESTIGATION 


Precedence: ROUTINE Date: 09/10/2009 

To: New York 


From: 


New York 

Squad CY-3_ 

Contact: _ 


212-384-3614 


Approved By: 



Drafted By: 


}?b ^ 


Case ID #: 196E-NY-296425 (Pending) 
288A-NY-300570 (Pending) 
288A-NY-300870 (Pending) 


Title: TRANSFER CASES 

Synopsis: To request the transfer of above cases. 

Details: Due to the transfer of the writer to Squad CY-3 it is 

requested the above captioned cases be transferred to squad CY-3. 
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UNCLASSIFIED 

FEDERAL BUREAU OF INVESTIGATION 


Precedence: ROUTINE Date: 09/28/2009 

To: New York Attn: SST CY-2 

SST CY-3 


From: New York 

Squad CY-3 

Contact: SA 


Approved By: 



Drafted By: 


}pbp> 


Case ID #: 288A-NY-300570 (Pending) 


Title: UNSUB(s) 

SULLIVAN & CROMWELL LLP; 
WACHTELL, LIPTON, ROSEN & KATZ; 
GREENBERG TRAURIG, LLC - VICTIMS 
CIP; 

00 :NY 


Synopsis: Request that case file be transferred from Squad CY-2 

to Squad CY-3. 

Details: The purpose of this EC is to request the captioned case 

file be administratively transferred from Squad CY-2 to Squad CY- 
3. There has been a realignment of the New York Division Cyber 
Crime Program and the creation of new squads. SA I l is the 

case agent of the captioned case and has been designated to squad 
CY-3. Therefore, it is requested that this case be transferred to 
CY-3 in order for it to be successfully completed. 

CC: 1 - 288A-NY-300570 
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♦♦ 


UNCLASSIFIED 
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(01/26/1998) 


FEDERAL BUREAU OF INVESTIGATION 


Precedence: ROUTINE Date: 04/23/2010 

To : New York 

From: New York 

Squad CY-3 

Contact : SA I I 


Approved By: | 

Drafted By: I h ob 

Case ID #: 288A-NY-300570 (Pending) 


Title: UNSUB(s) 

SULLIVAN & CROMWELL LLP; 

WACHTELL, LIPTON, ROSEN & KATZ; 

GREENBERG TRAURIG, LLC - VICTIMS 
CIP; 

00 :NY 

Synopsis: Close case administratively. 

Details: Writer recommends case is closed administratively due 
to the lack of venue and prosecutorial merit. 







